6.2 Identify and Describe the Components Used to Maintain Connectivity and Security of Remote Users (e.g., Remote Access Solutions, Network Segmentation, Security Policy Tuning, Monitoring and Logging, Certificates) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which security benefit is achieved by placing remote access users in a dedicated zone that is separate from the internal network?

   • AIt removes the need for user authentication
   • BIt limits the attack surface by restricting remote users' access to only necessary resources
   • CIt prevents remote users from using any applications
   • DIt automatically encrypts all traffic between remote users and the internet
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company has a GlobalProtect deployment. The security team wants to ensure that remote users can access the internet directly, but must be forced to use the VPN tunnel for access to internal resources. They also want to ensure that remote users cannot access other devices on the local network (e.g., their home network). What should they configure?

   • AFull tunnel with a security policy that allows all traffic from the GlobalProtect zone.
   • BFull tunnel with a security policy that denies traffic to the local network zone.
   • CSplit tunnel with a security policy that allows all traffic from the GlobalProtect zone.
   • DSplit tunneling with a security policy that denies traffic from the GlobalProtect zone to the local network zone.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company has recently enabled GlobalProtect for remote users. The security team notices that remote users are unable to reach the internal DNS server, which is located in a different zone. The security policy currently has a rule that allows all traffic from the GlobalProtect zone to the internal zone. What is the most likely cause of this issue?

   • AThe security policy is not allowing DNS traffic (UDP/TCP port 53) from the GlobalProtect zone to the DNS server zone.
   • BThe DNS server is not listening on the correct interface.
   • CThe remote users are using a public DNS server instead of the internal one.
   • DThe GlobalProtect gateway is not configured to push the internal DNS server address to remote clients.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which approach is commonly used to tune security policies for remote users?

   • AApplying policies based on user identity and group membership
   • BUsing only IP addresses to identify remote users
   • CApplying the same policy to all remote users regardless of role
   • DDisabling security features to improve remote user experience
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company is deploying GlobalProtect and wants to ensure that the VPN connection is encrypted and that the server is authenticated to the client. What should they configure?

   • AAn IPsec pre-shared key
   • BA RADIUS server for authentication
   • CA server certificate on the GlobalProtect gateway
   • DA client certificate on each remote user's device
   Reveal Solution Discussion Select an answer first