Palo Alto Networks System Engineer – Strata — Question 15

A customer is starting to understand their Zero Trust protect surface using the Palo Alto Networks Zero Trust reference architecture.
What are two steps in this process? (Choose two.)

Answer options

• A. Prioritize securing the endpoints of privileged users because if non-privileged user endpoints are exploited, the impact will be minimal due to perimeter controls.
• B. Categorize data and applications by levels of sensitivity.
• C. Gain visibility of and control over applications and functionality in the traffic flow using a port and protocol firewall.
• D. Validate user identities through authentication.

Correct answer: B

Explanation

The correct answer is B, as categorizing data and applications by sensitivity is crucial to implementing Zero Trust principles effectively. Option A is incorrect because it downplays the risk of exploiting non-privileged user endpoints. Options C and D, while important, are not foundational steps in initially understanding the Zero Trust protect surface.