PCNSE GlobalProtect VPN and Remote Access

Question 1

Which GlobalProtect component is responsible for authenticating remote users before they connect to the internal network?

Accepted Answer

GlobalProtect Portal

Answer

The GlobalProtect Portal authenticates remote users and distributes configuration and certificates to the GlobalProtect Agent.

Question 2

What is the purpose of Host Information Profile (HIP) in GlobalProtect?

Accepted Answer

To collect and report endpoint security posture data

Answer

HIP collects endpoint security posture data such as OS patch level and antivirus status, enabling policy enforcement based on device health.

Question 3

Which GlobalProtect connection method allows users to connect without initiating the connection themselves?

Accepted Answer

Pre-Logon

Answer

Pre-Logon establishes a VPN tunnel before the user logs in, using machine certificates for authentication.

Question 4

In GlobalProtect, what is split tunneling used for?

Accepted Answer

Routing only specific traffic through the VPN tunnel

Answer

Split tunneling directs only specified destination traffic through the VPN tunnel while other traffic goes directly to the internet.

Question 5

Which authentication method can GlobalProtect use to verify user identity alongside username and password?

Accepted Answer

MFA via RADIUS or SAML

Answer

GlobalProtect supports multi-factor authentication (MFA) by integrating with RADIUS or SAML identity providers.

PCNSE Exam Practice Test