5.2 Architect GlobalProtect Connection Methods: On-Demand, User-Logon (Always on), Pre-Logon (Always On) NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A security architect must choose a GlobalProtect connection method for a device that must be secured and managed even before a user logs in, such as for full-disk encryption and compliance. Which method should be selected?

   • AUser-logon
   • BAny method can provide pre-login security.
   • CPre-logon
   • DOn-demand
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A software development company has 300 employees who use laptops and work from home, the office, and customer sites. The security team wants to ensure that all corporate traffic is inspected by the firewall whenever an employee is logged in, regardless of the network. The company also wants to minimize the impact on users who are on high-latency networks. Which connection method should be configured?

   • AUser-logon (Always On)
   • BOn-demand
   • CBoth user-logon and pre-logon
   • DPre-logon (Always On)
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   How does an on-demand GlobalProtect connection get established?

   • AIt establishes when the user attempts to access a specific application.
   • BIt establishes automatically after the user logs in to the device.
   • CThe user manually initiates the connection through the GlobalProtect app.
   • DIt automatically establishes when the device boots.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A hospital deploys GlobalProtect on 500 Windows 10 workstations used by nurses and doctors. The security team requires that all traffic from these devices is inspected by the firewall whenever the device is powered on, even if a user has not yet logged in (e.g., during shift handover when the previous user has logged off but the device remains at the nurses' station). However, the IT helpdesk reports that some users complain about long wait times at login because the VPN must connect before they can access network drives. Which connection method should the architect configure to meet the security requirement while minimizing the login delay?

   • AConfigure user-logon (Always On) as the only connection method.
   • BConfigure on-demand connection method with a captive portal.
   • CConfigure pre-logon (Always On) as the only connection method.
   • DConfigure both pre-logon and user-logon (Always On) connection methods.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which GlobalProtect connection method would be most appropriate for a user who needs to manually connect only when accessing sensitive corporate applications, to minimize VPN usage?

   • APre-logon
   • BUser-logon
   • COn-demand
   • DAlways On
   Reveal Solution Discussion Select an answer first