exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 126 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 126
Topic #: 1
[All PCNSE Questions]

Which GlobalProtect Client connect method requires the distribution and use of machine certificates?

  • A. At-boot
  • B. Pre-logon
  • C. User-logon (Always on)
  • D. On-demand
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
rammsdoct
Highly Voted 4 years, 5 months ago
for machine certificate it is B: Pre-Logon if it was client certificate would be USER-LOGON https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFoCAK go to part B on cert profile topic.
upvoted 10 times
MyWil
4 years, 2 months ago
Rammsdoct you are correct based on the URL that you have provided: It says: Client certificate refers to user cert, it can be used for 'user-logon'/'on-demand' connect methods. Used to authenticate a user. -Machine certificate refers to device cert, it can be used for 'pre-logon' connect method. This is used to authenticate a device, not a user.
upvoted 3 times
...
...
Marshpillowz
Most Recent 9 months, 2 weeks ago
Selected Answer: B
B is correct
upvoted 1 times
...
DenskyDen
1 year, 9 months ago
Selected Answer: B
Machine certificate refers to device cert, it can be used for 'pre-logon' connect method.
upvoted 1 times
...
TAKUM1y
2 years ago
Selected Answer: B
https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-user-authentication/set-up-client-certificate-authentication/deploy-machine-certificates-for-authentication
upvoted 2 times
...
TAKUM1y
2 years ago
Selected Answer: B
https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-user-authentication/set-up-client-certificate-authentication
upvoted 2 times
...
UFanat
2 years, 4 months ago
Selected Answer: B
B. Pre-logon requires machine cert
upvoted 2 times
...
Breyarg
2 years, 10 months ago
i have literally built this config too many times not to know the correct answer. 100% B and 100% the bane of my existence!
upvoted 1 times
Breyarg
2 years, 10 months ago
to elaborate, you also need to have the private key and the cert chain visible on the cert when installed on a host.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago