PCNSE GlobalProtect VPN and Remote Access 3

Question 1

What GlobalProtect component can be deployed in the DMZ to allow external client connections?

Accepted Answer

External Gateway

Answer

Internal Gateway

Answer

Portal-Only Node

Answer

Satellite Hub

Question 2

Which configuration on the firewall defines which traffic from GlobalProtect clients bypasses the VPN tunnel?

Accepted Answer

Split Tunnel Access Route

Answer

Security Policy

Answer

NAT Policy

Answer

QoS Profile

Question 3

What is the purpose of the Clientless VPN feature in GlobalProtect?

Accepted Answer

To provide browser-based access to internal web applications without installing the GP agent

Answer

To establish IPsec tunnels without an agent

Answer

To bypass MFA for trusted users

Answer

To tunnel all traffic over HTTP

Question 4

When configuring GlobalProtect for IPv6, which statement is correct?

Accepted Answer

GlobalProtect supports IPv6 for both the tunnel interface and client-assigned addresses

Answer

GlobalProtect does not support IPv6 at all

Answer

IPv6 is only supported for HIP checks

Answer

IPv6 requires a separate portal configuration

Question 5

What is the effect of enabling 'Enforce GlobalProtect Connection for Network Access' on an endpoint?

Accepted Answer

It blocks network access until the GlobalProtect VPN is connected

Answer

It disables internet access completely

Answer

It forces split tunneling mode

Answer

It enables clientless VPN automatically

Question 6

Which log type on the Palo Alto firewall would you review to troubleshoot a failed GlobalProtect authentication?

Accepted Answer

GlobalProtect Logs

Answer

Traffic Logs

Answer

System Logs

Answer

Decryption Logs