In addition to creating a Security policy, how can an AI Access Security be used to prevent users from uploading financial information to ChatGPT?

Palo Alto Networks AI Access Security integrates with Enterprise Data Loss Prevention (DLP)

capabilities to control sensitive data within AI applications like ChatGPT. The most effective way to

prevent users from uploading financial information is to:

Define an Enterprise DLP rule: This rule would be configured to identify content that matches

patterns or keywords associated with financial information (e.g., credit card numbers, bank account

details, tax identifiers, financial statements).

Apply the DLP rule to the AI Access Security policy: This policy would be specifically configured to

inspect traffic to and from ChatGPT. When the DLP rule detects a user attempting to upload content

containing financial information, it can take a defined action, such as blocking the upload.

Let's analyze why the other options are incorrect based on official documentation:

A . Apply File Blocking to stop file uploads containing financial information. While File Blocking can

prevent the upload of certain file types, it is not content-aware. It cannot inspect the content of a file

to determine if it contains financial information. Therefore, it's not a granular or effective solution for

this specific requirement.

C . Add the ChatGPT domains using URL Filtering to block uploads containing financial information.

URL Filtering controls access to specific websites or categories of websites. While you could

potentially block access to ChatGPT entirely, it does not provide the capability to inspect the content

being uploaded to a permitted domain and prevent the transfer of sensitive financial data.

D . Apply a vulnerability profile to stop attempts to exploit system flaws or gain unauthorized access

to financial systems. Vulnerability profiles are designed to detect and prevent attempts to exploit

known security vulnerabilities in systems. They are not designed to inspect the content of user

uploads for sensitive data like financial information. While important for overall security, they do not

directly address the requirement of preventing financial data uploads to ChatGPT.

Therefore, configuring an Enterprise DLP rule within AI Access Security is the correct and most

effective method to prevent users from uploading financial information to ChatGPT by inspecting the

content of the uploads.