PCNSE GlobalProtect VPN and Remote Access 2

Question 1

Which protocol does GlobalProtect primarily use to establish its VPN tunnel?

Accepted Answer

IPsec

Answer

GlobalProtect uses IPsec (with SSL as a fallback) to establish encrypted VPN tunnels between the agent and gateway.

Question 2

What is the role of the GlobalProtect Gateway?

Accepted Answer

To terminate VPN tunnels and enforce security policy for remote users

Answer

The GlobalProtect Gateway terminates the IPsec/SSL VPN tunnel and applies security policy to inbound remote user traffic.

Question 3

Which feature allows GlobalProtect to dynamically select the best gateway based on response time?

Accepted Answer

Automatic Gateway Selection

Answer

Automatic Gateway Selection measures response times from multiple gateways and connects the agent to the fastest one.

Question 4

What type of certificate is required on the GlobalProtect Portal for secure client connections?

Accepted Answer

A certificate trusted by the client machine or browser

Answer

The portal certificate must be trusted by the connecting client to prevent certificate warnings and ensure secure connections.

Question 5

In a large enterprise GlobalProtect deployment, what is the recommended approach for scaling gateway capacity?

Accepted Answer

Deploy multiple gateways in different geographic locations

Answer

Deploying multiple geographically distributed gateways distributes load and reduces latency for remote users worldwide.

PCNSE Exam Practice Test