A company is planning to deploy a remote access solution for a small group of contractors who need access to a single internal web application. The contractors use a variety of devices, including personal laptops and tablets. The company wants to minimize the administrative overhead of managing client software. Which remote access solution is most appropriate?

GlobalProtect with a full tunnel

IPsec VPN with a dedicated client

A security administrator is setting up monitoring for a GlobalProtect deployment. The administrator wants to receive an alert when a remote user attempts to connect to a known malicious IP address. Which feature should they configure?

A traffic log filter for the GlobalProtect zone

A correlation object that monitors traffic logs for connections to the malicious IP

A security policy with a deny action and a log setting

A threat prevention profile on the GlobalProtect gateway

A security administrator is troubleshooting a remote user's inability to connect to the GlobalProtect VPN. The user reports that they can reach the portal but the connection fails during the tunnel establishment phase. Which log or monitoring component should the administrator check first to identify the issue?

System logs on the user's laptop

Configuration logs on the firewall

A company is deploying GlobalProtect and wants to use client certificates for authentication. The security team is concerned about the risk of a stolen laptop being used to connect to the VPN. They want to add an additional layer of security. What should they configure?

A longer certificate validity period to reduce the frequency of certificate renewal.

A certificate revocation list (CRL) that is updated daily.

A GlobalProtect gateway configuration that only accepts connections from a specific IP address range.

A user authentication method in addition to the client certificate.

Palo Alto NetworksCertified Network Security Professional

Domain 6Objective 2

6.2 Identify and Describe the Components Used to Maintain Connectivity and Security of Remote Users (e.g., Remote Access Solutions, Network Segmentation, Security Policy Tuning, Monitoring and Logging, Certificates) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 1)

Part of the Connectivity and Security domain, which accounts for 13% of the NETWORK-SECURITY-PROFESSIONAL exam.

23questions here

5free pages

5concepts

13%of the exam

Curriculum map

Network Security Fundamentals
NGFW and SASE Solution Functionality
Platform Solutions, Services, and Tools
NGFW and SASE Solution Maintenance and Configuration
Infrastructure Management and CDSS
1 more domain
- Connectivity and Security
  - 6.1 Explain the configuration and maintenance of network security for on-premises, cloud, and hybrid networks (e.g., network segmentation, policies, monitoring and logging, certificates)
  - 6.2 Identify and describe the components used to maintain connectivity and security of remote users (e.g., remote access solutions, network segmentation, Security policy tuning, monitoring and logging, certificates)
    12 3 4 5 ›

5 Concepts in This Objective

Remote access solutions
Network segmentation for remote access
Security policy tuning for remote users
Monitoring and logging for remote access
Certificates for remote access

Questions 1–5

1application · medium
A company is planning to deploy a remote access solution for a small group of contractors who need access to a single internal web application. The contractors use a variety of devices, including personal laptops and tablets. The company wants to minimize the administrative overhead of managing client software. Which remote access solution is most appropriate?
Select an answer first
2application · medium
A security administrator is setting up monitoring for a GlobalProtect deployment. The administrator wants to receive an alert when a remote user attempts to connect to a known malicious IP address. Which feature should they configure?
Select an answer first
3foundation · easy
Which remote access solution allows users to connect through a web browser using SSL/TLS without requiring a pre-installed VPN client?
Select an answer first
4application · medium
A security administrator is troubleshooting a remote user's inability to connect to the GlobalProtect VPN. The user reports that they can reach the portal but the connection fails during the tunnel establishment phase. Which log or monitoring component should the administrator check first to identify the issue?
Select an answer first
5expert · hard
A company is deploying GlobalProtect and wants to use client certificates for authentication. The security team is concerned about the risk of a stolen laptop being used to connect to the VPN. They want to add an additional layer of security. What should they configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-PROFESSIONAL” is a trademark of its owner, used for identification only.

6.2 Identify and Describe the Components Used to Maintain Connectivity and Security of Remote Users (e.g., Remote Access Solutions, Network Segmentation, Security Policy Tuning, Monitoring and Logging, Certificates) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 1)

Questions 1–5

A security administrator is setting up monitoring for a GlobalProtect deployment. The administrator wants to receive an alert when a remote user attempts to connect to a known malicious IP address. Which feature should they configure?

Which remote access solution allows users to connect through a web browser using SSL/TLS without requiring a pre-installed VPN client?

A company is deploying GlobalProtect and wants to use client certificates for authentication. The security team is concerned about the risk of a stolen laptop being used to connect to the VPN. They want to add an additional layer of security. What should they configure?

Keep studying — Connectivity and Security