PCNSE GlobalProtect VPN and Remote Access 3

Question 1

What GlobalProtect component can be deployed in the DMZ to allow external client connections?

Accepted Answer

External Gateway

Answer

An External Gateway is deployed in the DMZ or with a public IP to accept encrypted VPN connections from remote clients on the internet.

Question 2

Which configuration on the firewall defines which traffic from GlobalProtect clients bypasses the VPN tunnel?

Accepted Answer

Split Tunnel Access Route

Answer

Split Tunnel Access Routes configured on the gateway define which subnets or domains are routed through the VPN versus sent directly to the internet.

Question 3

What is the purpose of the Clientless VPN feature in GlobalProtect?

Accepted Answer

To provide browser-based access to internal web applications without installing the GP agent

Answer

Clientless VPN provides access to internal web applications through an SSL-secured browser portal without requiring the GlobalProtect agent to be installed.

Question 4

When configuring GlobalProtect for IPv6, which statement is correct?

Accepted Answer

GlobalProtect supports IPv6 for both the tunnel interface and client-assigned addresses

Answer

GlobalProtect supports IPv6 for tunnel interfaces and can assign IPv6 addresses to connecting clients in addition to IPv4.

Question 5

What is the effect of enabling 'Enforce GlobalProtect Connection for Network Access' on an endpoint?

Accepted Answer

It blocks network access until the GlobalProtect VPN is connected

Answer

This setting prevents the endpoint from accessing any network resources until the GlobalProtect agent successfully establishes a VPN connection.

PCNSE Exam Practice Test

PCNSE Exam Practice Test

PCNSE GlobalProtect VPN and Remote Access 3