Last Attempt Practitioner Questions

A credit card number is an example of PII that you need to prevent from leaving your enterprise network. PII, or personally identifiable information, is any information that can be used to identify an individual, either alone or in combination with other data. PII can be sensitive or non-sensitive, depending on the level of protection required and the potential harm if exposed. Sensitive PII includes data that can directly identify an individual and cause significant harm if leaked or stolen, such as financial information, medical records, or government-issued ID numbers. Non-sensitive PII includes data that is easily accessible from public sources and does not pose a high risk of identity theft, such as zip code, race, or gender. A credit card number is a sensitive PII because it can be used to access the cardholder’s account, make fraudulent transactions, or steal their identity. Therefore, it is important to prevent credit card numbers from leaving the enterprise network, where they could be intercepted by hackers, malicious insiders, or third parties. To protect credit card numbers and other sensitive PII, enterprises should implement data security measures such as encryption, tokenization, masking, access control, auditing, and monitoring. Additionally, enterprises should comply with data privacy laws and standards that regulate the collection, use, and protection of PII, such as the Payment Card Industry Data Security Standard (PCI DSS), the General Data Protection Regulation (GDPR), or the California Consumer Privacy Act (CCPA). References:

What is PII? Examples, laws, and standards | CSO Online

What is Personally Identifiable Information (PII)? | IBM

What Is Personally Identifiable Information (PII)? Types and Examples

What is PII (personally identifiable information)? - Cloudflare

What is Personally Identifiable Information (PII)? - Data Privacy Manager

Cortex XDR is a detection and response platform that natively integrates network, endpoint, and cloud data to stop sophisticated attacks. A key benefit of Cortex XDR is that it acts as a safety net during an attack while patches are developed. Cortex XDR uses machine learning and behavioral analytics to detect and validate threats, and automatically reveals the root cause of alerts to speed up investigations. Cortex XDR also enables flexible and rapid response actions to contain and remediate threats across the environment. References: Cortex XDR- Extended Detection and Response - Palo Alto Networks, What is Cortex XDR | Palo Alto Networks, Cortex XDR Datasheet - Palo Alto Networks

Advanced Threat Prevention is the Palo Alto Networks solution that has replaced legacy Intrusion Prevention Systems (IPS). It offers inline, ML-powered threat detection and evasion-resistant inspection to block sophisticated threats in real time, going beyond traditional signature-based IPS.

East-West traffic is the lateral movement of data packets between servers within a data center, or across private and public clouds1. This type of traffic has grown substantially with the proliferation of data centers and cloud adoption, and it now surpasses the conventional North-South traffic that goes in or out of the network2. Therefore, it is important to protect East-West traffic from potential malicious actors and breaches, as threats can arise internally and move laterally without ever touching the traditional network perimeter12. By inspecting and monitoring all East-West traffic, organizations can effectively block the lateral movement of threat actors, increase network visibility, protect vital applications and data, and lower costs and risks for distributed operations23. References:

East-West Traffic: Everything You Need to Know | Gigamon Blog

What is East-West Security? | VMware Glossary

How to Harness East-West Visibility for a Stronger Defensive Security …