PCNSE GlobalProtect VPN and Remote Access

Question 1

Which GlobalProtect component is responsible for authenticating remote users before they connect to the internal network?

Accepted Answer

GlobalProtect Portal

Answer

GlobalProtect Gateway

Answer

GlobalProtect Agent

Answer

GlobalProtect HIP Check

Question 2

What is the purpose of Host Information Profile (HIP) in GlobalProtect?

Accepted Answer

To collect and report endpoint security posture data

Answer

To encrypt VPN tunnel traffic

Answer

To assign IP addresses to remote clients

Answer

To manage firewall policy rules

Question 3

Which GlobalProtect connection method allows users to connect without initiating the connection themselves?

Accepted Answer

Pre-Logon

Answer

On-Demand

Answer

User-Logon

Answer

Split Tunnel

Question 4

In GlobalProtect, what is split tunneling used for?

Accepted Answer

Routing only specific traffic through the VPN tunnel

Answer

Encrypting all traffic through the VPN

Answer

Authenticating users with two factors

Answer

Load balancing between multiple gateways

Question 5

Which authentication method can GlobalProtect use to verify user identity alongside username and password?

Accepted Answer

MFA via RADIUS or SAML

Answer

OSPF authentication

Answer

BGP MD5 authentication

Answer

LLDP authentication

Question 6

What happens when a HIP check fails in a GlobalProtect deployment with policy enforcement enabled?

Accepted Answer

The user is placed in a quarantine zone with restricted access

Answer

The VPN tunnel is encrypted with a weaker cipher

Answer

The gateway reboots the client machine

Answer

The portal denies certificate issuance