NGFW-ENGINEER · Question #78
An administrator is configuring a GlobalProtect pre-logon VPN. The administrator has already imported the necessary internal certificate authority (CA) certificates for issuing machine certificates on
Sign in or unlock NGFW-ENGINEER to reveal the answer and full explanation for question #78. The question stem and answer options stay visible for context.
Question
An administrator is configuring a GlobalProtect pre-logon VPN. The administrator has already imported the necessary internal certificate authority (CA) certificates for issuing machine certificates onto the firewall. Which configuration is required on the GlobalProtect Gateway to enable pre-logon using these machine certificates?
Options
- ACreate a device-based Security policy that allows traffic from the pre-logon user to an internal
- BCreate an authentication profile that points to the machine certificate's CA and assign it by using
- CCreate a certificate profile that trusts the machine certificate's CA and assign it within the Gateway
- DConfigure the Gateway Agent --> Tunnel Settings to use IPSec with machine certificate
Unlock NGFW-ENGINEER to see the answer
You've previewed enough free NGFW-ENGINEER questions. Unlock NGFW-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.