PCNSE GlobalProtect Configuration Quiz

1. What is the primary advantage of using certificate-based authentication in GlobalProtect?

Reduces portal processing overhead

Provides stronger authentication without username/password

Eliminates the need for encryption

Simplifies client configuration

2. What is the recommended approach for testing GlobalProtect configuration changes in production?

Apply changes directly to all users immediately

Use staged rollout with pilot groups and monitoring

Test only on the portal, not the gateway

GlobalProtect changes do not require testing

3. In GlobalProtect, how are security policies applied to remote users?

Only at the portal level

Only at the gateway level

At both portal and gateway based on user/group membership

Policies cannot be applied to remote users

4. Which GlobalProtect component is deployed on the perimeter to terminate VPN tunnels?

Portal

Gateway

Management Server

Client Agent

5. What is a key consideration when deploying GlobalProtect in a multi-gateway environment?

All gateways must use identical security policies

Load distribution and failover mechanisms must be configured

Gateways cannot communicate with each other

Only one gateway can be active at a time

6. In GlobalProtect, what does the Host Information Profile (HIP) report contain?

User identity and login credentials

Endpoint OS, antivirus status, firewall status, and patch level

Gateway IP address and port number

Portal licensing information

7. Which authentication method in GlobalProtect is best for high-security environments?

Username and password only

Multi-factor authentication with hardware tokens

Single sign-on without additional verification

IP address whitelisting

8. What is the purpose of the GlobalProtect Agent on a client endpoint?

Stores encryption keys permanently

Establishes and maintains VPN tunnel, enforces local policies

Monitors all network traffic for threats

Backs up user data to the portal

9. In a GlobalProtect deployment, what role does the management plane play?

Processes VPN traffic between clients and gateways

Configures and monitors GlobalProtect components

Encrypts all data center traffic

Authenticates remote users only

10. Which GlobalProtect feature allows administrators to require VPN connection before accessing resources?

Always-On VPN

Split Tunneling Policy

Gateway Load Balancing

Portal Redundancy

11. What is the primary role of a GlobalProtect portal in the network architecture?

Authenticates users and delivers gateway information and client configuration

Encrypts all traffic between remote clients and the data center

Monitors all VPN connections in real-time

Stores all user credentials in an encrypted database

12. In GlobalProtect, how does the client discover the gateway address?

Manual entry by the end user

Portal provides gateway information after authentication

DHCP server assigns gateway address

Client broadcasts a discovery request

13. What is the recommended practice for GlobalProtect portal redundancy?

Single portal is sufficient for all deployments

Deploy multiple portals with load balancing

Use only active-passive failover

Portals cannot be redundant

14. Which feature ensures that only compliant endpoints can connect to GlobalProtect?

Endpoint Compliance Check (ECC)

Host Information Profile (HIP)

Client Certificate Validation

Gateway Access Control

15. In GlobalProtect, what does split tunneling allow?

Users to access both VPN and non-VPN traffic simultaneously

Multiple gateways to share a single IP address

Portal and gateway on the same firewall

Encryption of only authentication traffic

16. What is the maximum number of concurrent VPN sessions a GlobalProtect gateway can typically support?

Depends on hardware model and licensing

Always 1,000 sessions maximum

Unlimited without restrictions

500 sessions per interface

17. Which GlobalProtect component is responsible for distributing client software and configuration to endpoints?

Gateway

Portal

Client Agent

Management Server

18. What protocol does GlobalProtect use by default for client-to-gateway communication?

PPTP

L2TP/IPsec

SSL/TLS

GRE

19. In GlobalProtect, what is the purpose of a gateway?

Provides user authentication and policy information

Establishes the VPN tunnel and enforces security policies

Stores client configuration files

Manages portal licensing and subscriptions

20. Which authentication method is most commonly used with GlobalProtect in enterprise environments?

Single-factor authentication only

Multi-factor authentication with directory integration

Certificate-based authentication exclusively

Pre-shared keys without user validation