PCNSE GlobalProtect VPN and Remote Access 2

Question 1

Which protocol does GlobalProtect primarily use to establish its VPN tunnel?

Accepted Answer

IPsec

Answer

GRE

Answer

L2TP

Answer

PPTP

Question 2

What is the role of the GlobalProtect Gateway?

Accepted Answer

To terminate VPN tunnels and enforce security policy for remote users

Answer

To distribute VPN configuration to agents

Answer

To issue client certificates

Answer

To monitor endpoint health only

Question 3

Which feature allows GlobalProtect to dynamically select the best gateway based on response time?

Accepted Answer

Automatic Gateway Selection

Answer

Policy-Based Forwarding

Answer

BGP Route Reflector

Answer

ECMP

Question 4

What type of certificate is required on the GlobalProtect Portal for secure client connections?

Accepted Answer

A certificate trusted by the client machine or browser

Answer

Self-signed only

Answer

An expired certificate for testing

Answer

A wildcard certificate from the internal CA only

Question 5

In a large enterprise GlobalProtect deployment, what is the recommended approach for scaling gateway capacity?

Accepted Answer

Deploy multiple gateways in different geographic locations

Answer

Deploy a single high-memory gateway

Answer

Use software-only virtual gateways on endpoints

Answer

Disable HIP checks to reduce load

Question 6

Which GlobalProtect feature enables seamless user authentication using Windows credentials without prompting the user?

Accepted Answer

SSO (Single Sign-On) with Windows credentials

Answer

On-Demand tunnel

Answer

Certificate pinning

Answer

OCSP stapling