Discuss Palo Alto Networks Cybersecurity-Practitioner Exam Topic 5 Question 12

Which aspect of a SaaS application requires compliance with local organizational security policies?

ATypes of physical storage media used

BData-at-rest encryption standards

CAcceptable use of the SaaS application

DVulnerability scanning and management

Suggested Answer: C

SaaS applications are cloud-based software that users can access from anywhere and any device. This poses a challenge for organizations to ensure that their employees are using the SaaS applications in a secure and compliant manner.Therefore, organizations need to establish and enforce acceptable use policies (AUPs) for SaaS applications that define the rules and guidelines for accessing and using the applications, such as who can use them, what data can be stored or shared, and what actions are prohibited12.AUPs help organizations to protect their data, prevent unauthorized access, and comply with local regulations and standards3.Reference:Using Software as a Service (SaaS) securely - NCSC,Minimum Security Standards for Software-as-a-Service (SaaS) and Platform-as-a-Service (PaaS) | University IT,How to Secure Your SaaS Applications - CyberArk

Get Premium Cybersecurity-Practitioner Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

17 comments · newest first

William 25 days ago

I feel B is essential for data safety.

Britt 1 month ago

C is definitely the best choice. Policies guide usage.

Ettie 1 month ago

I lean towards A. Physical media can be a risk.

Doretha 1 month ago

D is vital too. Regular scans keep vulnerabilities in check.

Adela 2 months ago

True, but if users misuse it, all else fails.

Alease 2 months ago

But B is also important. Data protection is crucial.

Lanie 2 months ago

Agreed! C covers user behavior and security.

Brinda 2 months ago

I think C is the most relevant. Compliance is key.

Mindy 2 months ago

But what about D? Vulnerability scanning is crucial too!

Veda 2 months ago

I agree with Latia, C covers user behavior.

Dominga 3 months ago

Wait, are we sure about C? Seems too broad.

Paola 3 months ago

I think B is more important for security standards.

Latia 3 months ago

Definitely C, it's all about how we use the app.

Carli 3 months ago

I practiced a question similar to this, and I think D) Vulnerability scanning and management is also crucial for compliance, but I'm leaning towards C.

Ivette 3 months ago

I feel like A) Types of physical storage media used could be relevant, but it seems more technical than policy-focused.

Veronika 3 months ago

I'm not entirely sure, but I remember something about B) Data-at-rest encryption standards being important for compliance too.

Timothy 4 months ago

I think it might be C) Acceptable use of the SaaS application, since that usually ties back to organizational policies.

Palo Alto Networks Cybersecurity-Practitioner Exam - Topic 5 Question 12 Discussion