NETSEC-GENERALIST Question #58: Real Exam Question with Answer & Explanation

Question

When a user works primarily from a remote location but reports to the corporate office several times a month, what does GlobalProtect use to determine if the user should connect to an internal gateway?

Options

• AICMP ping to Panorama management interface
• BUser login credentials
• CExternal host detection
• DReverse DNS lookup of preconfigured host IP

Explanation

GlobalProtect is Palo Alto Networks' VPN and Zero Trust remote access solution. It dynamically determines whether a user should connect to an internal or external gateway based on external How External Host Detection Works: Preconfigured External Host Detection The GlobalProtect agent checks for a predefined trusted external IP address (e.g., the corporate office's public IP). If the detected IP matches the trusted external host, the GlobalProtect client assumes the user is inside the corporate network and does not establish a VPN connection. If the detected IP does not match, GlobalProtect initiates a VPN connection to an external Improves Performance & Security Prevents unnecessary VPN connections when users are inside the corporate office. Reduces bandwidth overhead by ensuring only external users connect via VPN.

No community discussion yet for this question.