Which option is an example of a North-South traffic flow?
Answer(s): C
North-south refers to data packets that move in and out of the virtualized environment from the host network or a corresponding traditional data center. North-south traffic is secured by one or more physical form factor perimeter edge firewalls.
Which aspect of a SaaS application requires compliance with local organizational security policies?
SaaS applications are cloud-based software that users can access from anywhere and any device. This poses a challenge for organizations to ensure that their employees are using the SaaS applications in a secure and compliant manner. Therefore, organizations need to establish and enforce acceptable use policies (AUPs) for SaaS applications that define the rules and guidelines for accessing and using the applications, such as who can use them, what data can be stored or shared, and what actions are prohibited12. AUPs help organizations to protect their data, prevent unauthorized access, and comply with local regulations and standards3.
Using Software as a Service (SaaS) securely- NCSC, Minimum Security Standards for Software-as-a-Service (SaaS) and Platform-as-a-Service (PaaS) | University IT, How to Secure Your SaaS Applications - CyberArk
Which option describes the "selective network security virtualization" phase of incrementally transforming data centers?
Answer(s): A
Selective network security virtualization: Intra-host communications and live migrations are architected at this phase. All intra-host communication paths are strictly controlled to ensure that traffic between VMs at different trust levels is intermediated either by an on-box, virtual security appliance or by an off-box, physical security appliance.
Which TCP/IP sub-protocol operates at the Layer7 of the OSI model?
Application (Layer 7 or L7): This layer identifies and establishes availability of communication partners, determines resource availability, and synchronizes communication.Presentation (Layer 6 or L6): This layer provides coding and conversion functions (such as data representation, character conversion, data compression, and data encryption) to ensure that data sent from the Application layer of one system is compatible with the Application layer of the receiving system.Session (Layer 5 or L5): This layer manages communication sessions (service requests and service responses) between networked systems, including connection establishment, data transfer, and connection release.Transport (Layer 4 or L4): This layer provides transparent, reliable data transport and end-to-end transmission control.
Anthem server breaches disclosed Personally Identifiable Information (PII) from a number of its servers. The infiltration by hackers was attributed to which type of vulnerability?
Answer(s): D
The Anthem data breach of 2015 was caused by a phishing scheme that captured a database administrator's password. According to the U.S. Department of Health and Human Services (HHS)Office for Civil Rights (OCR), hackers sent phishing emails to an Anthem subsidiary. At least one employee responded. Attackers were able to plant malware on the company's system and gain remote access to confidential information1. The breach exposed the electronic protected health information of almost 79 million people, including names, Social Security numbers, medical identification numbers, addresses, dates of birth, email addresses, and employment information2.
Anthem Pays OCR $16 Million in Record HIPAA Settlement Following Largest U.S. Health Data BreachHow Anthem Data Breach Exposed Personnel Records - IDStrong
Post your Comments and Discuss Palo Alto Networks Cybersecurity-Practitioner exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the Cybersecurity-Practitioner content, but please register or login to continue.