6.2 Identify and Describe the Components Used to Maintain Connectivity and Security of Remote Users (e.g., Remote Access Solutions, Network Segmentation, Security Policy Tuning, Monitoring and Logging, Certificates) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security administrator is reviewing the firewall logs and notices that a remote user is generating a high volume of traffic to an internal file server. The administrator wants to determine if this is normal behavior or a potential security issue. Which log type should the administrator analyze to get the most detailed information about this traffic?

   • ATraffic logs
   • BThreat logs
   • CConfiguration logs
   • DSystem logs
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security administrator is investigating a report that a remote user's account may have been compromised. The administrator wants to see all the VPN connections made by that user over the past week. Which log type should the administrator query?

   • AThreat logs
   • BTraffic logs
   • CGlobalProtect logs
   • DSystem logs
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is deploying GlobalProtect for its remote workforce. The security team wants to ensure that remote users can only access the internal HR system and the corporate file share, but not the internal development servers. They also want to prevent remote users from accessing the internet through the VPN tunnel. What is the most effective way to achieve this?

   • AAssign all remote users to a single dynamic address group and create a broad allow policy for all internal zones.
   • BConfigure the GlobalProtect gateway to use split tunneling, sending only internal traffic through the tunnel.
   • CCreate a security policy that allows traffic from the GlobalProtect zone to the HR and file server zones, and deny all other traffic.
   • DEnable SSL decryption on the GlobalProtect gateway to inspect all traffic.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   When tuning security policies for remote users, what is the primary consideration?

   • ADisabling logging for remote user traffic to improve performance
   • BAllowing necessary access while restricting unauthorized activity
   • CBlocking all traffic from remote users to the internet
   • DGiving remote users the same access as internal users without restriction
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company is implementing GlobalProtect for remote access. The security team wants to ensure that only company-issued laptops can connect to the VPN. They also want to simplify the user experience by not requiring a separate username and password for VPN access. Which authentication method should they configure?

   • AUser certificate authentication with single sign-on (SSO)
   • BMachine certificate authentication
   • CMachine certificate authentication with single sign-on (SSO)
   • DUser certificate authentication
   Reveal Solution Discussion Select an answer first