What is the purpose of configuring multi-factor authentication (MFA) for GlobalProtect?

To require an additional verification factor beyond the primary credentials

To reduce the number of authentication prompts for users

To allow users to authenticate without a password

To provide a single sign-on experience across all applications

What is the primary purpose of the GlobalProtect gateway configuration on a Palo Alto Networks firewall?

To authenticate users against the local database only

To provide the initial app download and portal configuration to remote users

To manage the distribution of client certificates to remote users

To terminate the VPN tunnel and enforce security policies for remote users

In a GlobalProtect gateway configuration, what is the purpose of the 'Client Routes' setting?

To define which subnets are reachable through the VPN tunnel

To specify the DNS servers used by the remote user

To set the encryption algorithm for the tunnel

To determine the authentication method for the remote user

A company is using GlobalProtect with certificate-based authentication. They want to ensure that only certificates issued by their internal CA are accepted. What should the administrator configure on the portal and gateway?

Configure the authentication profile to use Kerberos and rely on the CA to validate certificates.

Configure the authentication profile to use LDAP and rely on the CA to validate certificates.

Configure the authentication profile to use RADIUS and rely on the CA to validate certificates.

Configure a certificate profile that specifies the internal CA as the trusted root, and use it in the authentication profile.

Palo Alto NetworksCertified Next-Generation Firewall Engineer

Domain 1Objective 5

1.5 Configure GlobalProtect NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 2)

Part of the PAN-OS Networking Configuration domain, which accounts for 40% of the NEXT-GENERATION-FIREWALL-ENGINEER exam.

9questions here

2free pages

4concepts

40%of the exam

Questions 6–9

6foundation · easy
What is the purpose of configuring multi-factor authentication (MFA) for GlobalProtect?
Select an answer first
7foundation · easy
What is the primary purpose of the GlobalProtect gateway configuration on a Palo Alto Networks firewall?
Select an answer first
8foundation · easy
In a GlobalProtect gateway configuration, what is the purpose of the 'Client Routes' setting?
Select an answer first
9application · medium
A company is using GlobalProtect with certificate-based authentication. They want to ensure that only certificates issued by their internal CA are accepted. What should the administrator configure on the portal and gateway?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NEXT-GENERATION-FIREWALL-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NEXT-GENERATION-FIREWALL-ENGINEER” is a trademark of its owner, used for identification only.