5.2 Architect GlobalProtect Connection Methods: On-Demand, User-Logon (Always on), Pre-Logon (Always On) NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which statement accurately describes the three GlobalProtect connection methods?

   • AOn-demand and user-logon both require user authentication, while pre-logon does not establish a connection.
   • BOn-demand establishes at boot, user-logon requires user initiation, and pre-logon establishes at user login.
   • COn-demand requires user initiation, user-logon establishes at user login, and pre-logon establishes before user authentication.
   • DUser-logon and pre-logon are identical except that pre-logon requires user credentials at boot.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A university provides GlobalProtect to faculty and staff on their personal laptops. The IT department wants to minimize the impact on users who are not on campus and do not need VPN access for most of their work. However, when users are on the campus network, the firewall should enforce security policies on their traffic. The university also wants to avoid any automatic connection attempts that could fail on networks with captive portals. Which connection method should be configured?

   • ABoth user-logon and pre-logon
   • BOn-demand
   • CPre-logon (Always On)
   • DUser-logon (Always On)
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is a primary benefit of the user-logon (Always On) connection method?

   • AIt allows users to choose when to connect, reducing bandwidth usage.
   • BIt automatically enforces security policies as soon as the user logs in, without requiring user action.
   • CIt eliminates the need for user authentication on the device.
   • DIt secures the device before the user logs in, enabling pre-user management.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   When does a pre-logon (Always On) GlobalProtect connection establish?

   • AAfter the user authenticates to the corporate network.
   • BAfter the user logs in, but before the desktop loads.
   • COnly when the user manually initiates it.
   • DAt device boot, before user authentication.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A government agency issues laptops to field agents who work in remote locations. The laptops contain sensitive data and must be protected even if they are stolen before the user logs in. The agency requires that the GlobalProtect tunnel is established at boot so that the firewall can enforce security policies on the pre-login environment. Which connection method should be configured?

   • APre-logon (Always On)
   • BBoth user-logon and on-demand
   • CUser-logon (Always On)
   • DOn-demand
   Reveal Solution Discussion Select an answer first