Examice

Exam PCNSE All QuestionsBrowse all questions from this exam

Question 100

View the GlobalProtect configuration screen capture.

What is the purpose of this configuration?

It configures the tunnel address of all internal clients to an IP address range starting at 192.168.10.1.

It forces an internal client to connect to an internal gateway at IP address 192.168.10.1.

It enables a client to perform a reverse DNS lookup on 192.168.10.1 to detect that it is an internal client.

It forces the firewall to perform a dynamic DNS update, which adds the internal gateway's hostname and IP address to the DNS server.

Correct Answer: C

The configuration displayed in the GlobalProtect screen capture indicates that the 'Internal Host Detection IPv4' option is enabled. The 'IP Address' field is set to 192.168.10.1 and the 'Hostname' field to host.my.domain. This setup is for internal host detection, whereby a client can perform a reverse DNS lookup on the IP address to identify itself as being part of the internal network. When the client resolves the specified IP address to the given hostname, it determines that it is within the internal network, and hence the corresponding internal policies can be applied.

Discussion

evdwOption: C

correct answer : C

shetoshandasaOption: C

"C" is correct https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-web-interface-help/globalprotect/network-globalprotect-portals/globalprotect-portals-agent-configuration-tab/globalprotect-portals-agent-internal-tab

TAKUM1yOption: C

https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-portals/define-the-globalprotect-app-configurations

UFanatOption: C

C. Reverse DNS lookup should be done to check Internal network.

FS68Option: C

C is correct

MarshpillowzOption: C

C is correct