Which type of access allows unmanaged endpoints to access secured on-premises applications?

Question

Options

• Amanual external gateway
• Bsecure web gateway (SWG)
• CGlobalProtect VPN for remote access
• DPrisma Access Clientless VPN

• A
  3% (1)
• C
  6% (2)
• D
  91% (31)

Explanation

Prisma Access Clientless VPN is the correct answer because "clientless" means no software agent needs to be installed on the connecting device - making it the only option that works for unmanaged endpoints (devices outside IT control, like personal laptops or partner machines) that cannot have corporate software deployed on them. It delivers browser-based access to secured on-premises applications through the Prisma Access cloud.

Why the distractors are wrong:

• A (Manual external gateway): This is a GlobalProtect configuration option that still requires the GlobalProtect agent to be installed, ruling out unmanaged devices.
• B (Secure web gateway): SWG filters and secures outbound internet traffic from users - it does not provide inbound access to internal on-premises applications.
• C (GlobalProtect VPN for remote access): GlobalProtect requires a client to be installed and managed on the endpoint, which is impossible on unmanaged devices.

Memory tip: Lock onto the word "unmanaged" - if you can't install software on the device, you need something that works without a client. Clientless = no client = unmanaged devices. The "Clientless" in option D is the direct answer to "unmanaged."

No community discussion yet for this question.