6.2 Identify and Describe the Components Used to Maintain Connectivity and Security of Remote Users (e.g., Remote Access Solutions, Network Segmentation, Security Policy Tuning, Monitoring and Logging, Certificates) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which remote access solution encapsulates user traffic in an encrypted tunnel between the remote device and the corporate network, typically using IPsec or SSL/TLS?

   • AA network firewall
   • BA VPN
   • CA network switch
   • DA load balancer
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company has a GlobalProtect deployment. The security team wants to implement a zero-trust model for remote access. They want to ensure that remote users can only access the specific applications they need, and that access is granted based on the user's identity and device posture. Which approach is the most aligned with this goal?

   • AConfigure GlobalProtect to use split tunneling and rely on the user's local firewall for security.
   • BCreate a single security policy that allows all traffic from the GlobalProtect zone to the internal zone.
   • CUse GlobalProtect with HIP (Host Information Profile) checks and create granular security policies based on user and device groups.
   • DEnable SSL decryption on the GlobalProtect gateway to inspect all traffic.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary role of certificates in remote access connectivity?

   • ATo replace the need for user authentication
   • BTo filter network traffic
   • CTo increase the speed of the VPN tunnel
   • DTo authenticate the identity of the VPN gateway and establish trust
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security administrator is tuning security policies for a GlobalProtect deployment. The administrator notices that remote users are able to access the internal network, but they are also able to access the firewall's management interface. What is the most likely cause of this issue?

   • AThe remote users are using a different authentication method that bypasses security policies.
   • BThe firewall's management interface is not protected by a security policy.
   • CThe security policy that allows traffic from the GlobalProtect zone to the internal zone is too broad and also matches traffic to the management interface.
   • DThe GlobalProtect gateway is not configured to restrict access to the management interface.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Why is monitoring and logging important for remote access connections?

   • AIt eliminates the need for security policies
   • BIt automatically blocks all malicious traffic
   • CIt provides visibility into who is connecting and what they are accessing
   • DIt encrypts remote access traffic
   Reveal Solution Discussion Select an answer first