
Palo Alto NetworksCertified Next-Generation Firewall Engineer
Domain 1Objective 5
1.5 Configure GlobalProtect NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 1)
Part of the PAN-OS Networking Configuration domain, which accounts for 40% of the NEXT-GENERATION-FIREWALL-ENGINEER exam.
9questions here
2free pages
4concepts
40%of the exam
Questions 1–5
- 1
In GlobalProtect, which configuration element determines which traffic is sent through the VPN tunnel when split tunneling is enabled?
Select an answer first - 2
Which authentication method for GlobalProtect uses a certificate installed on the remote user's device to verify the user's identity?
Select an answer first - 3
A network engineer is configuring a GlobalProtect portal on a Palo Alto Networks firewall. Which component must be configured to allow remote users to download the GlobalProtect app and retrieve portal configuration?
Select an answer first - 4
What is the primary benefit of configuring split tunneling in GlobalProtect?
Select an answer first - 5
Which GlobalProtect portal setting controls whether the portal is reachable over HTTP or HTTPS?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NEXT-GENERATION-FIREWALL-ENGINEER” is a trademark of its owner, used for identification only.