Which two actions should a systems engineer take when a customer is concerned about how to remain aligned to Zero Trust principles as they adopt additional security features over time? (Choose two)

Question

Options

• ATurn on all licensed Cloud-Delivered Security Services (CDSS) subscriptions in blocking mode for
• BApply decryption where possible to inspect and log all new and existing traffic flows.
• CUse the Best Practice Assessment (BPA) tool to measure progress toward Zero Trust principles.
• DUse the Policy Optimizer tool to understand security rules allowing users to bypass decryption.

• A
  6% (1)
• B
  83% (15)
• D
  11% (2)

Explanation

When adopting additional security features over time, remaining aligned with Zero Trust principles requires a focus on constant visibility, control, and adherence to best practices. The following actions are the most relevant: Zero Trust principles emphasize visibility into all traffic, whether encrypted or unencrypted. Without decryption, encrypted traffic becomes a blind spot, which attackers can exploit. By applying decryption wherever feasible, organizations ensure they can inspect, log, and enforce policies on encrypted traffic, thus adhering to Zero Trust principles. The BPA tool provides detailed insights into the customer's security configuration, helping measure alignment with Palo Alto Networks' Zero Trust best practices. It identifies gaps in security posture and recommends actionable steps to strengthen adherence to Zero Trust principles over time.

No community discussion yet for this question.