PCNSE Secure Access and VPN Practice Question
Which THREE of the following are capabilities of GlobalProtect Host Information Profile (HIP)?
⚠ Common exam trap
Watch out — candidates often confuse HIP with GlobalProtect's location-based features or application-level checks, assuming HIP can verify user location or browser versions, when in reality HIP is strictly focused on endpoint security posture attributes like OS, antivirus, disk encryption, and patch management.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Check if antivirus is installed and running
Option C is correct because HIP collects host data on endpoint security software, including whether antivirus/anti-malware is installed, running, and up to date, which is a core HIP check. Option D is correct because HIP can verify disk encryption status (for example, BitLocker or FileVault) as part of its endpoint compliance data. Option E is correct because HIP reports the operating system version and patch level, allowing security policies to require a minimum OS version. Option A is not a HIP capability because HIP profiles endpoint host attributes, not the user's geographic location, which is handled by other means such as source region or GlobalProtect gateway selection. Option B is not a HIP capability because HIP does not natively report browser version; browser checks are not part of the standard HIP object categories.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Check the user's location
Why it's wrong here
HIP collects endpoint posture data such as patch level, antivirus and disk encryption, not geographic location, which GlobalProtect derives from source IP or GPS separately. It is tempting because location-based policy is a common GlobalProtect use case, but that is delivered through region objects and source-IP matching rather than HIP profiles.
- ✗
Check the browser version
Why it's wrong here
HIP does report installed software and patch state, yet browser version is gathered only when a custom check or the relevant HIP object is configured; it is not a native capability. It tempts because endpoint application inventory is HIP's purpose, but the standard objects cover antivirus, patch management and disk encryption instead.
- ✓
Check if antivirus is installed and running
Why this is correct
HIP collects host posture data via the GlobalProtect agent, including whether antivirus software is installed and actively running. This satisfies the stem's requirement by confirming endpoint security compliance before granting or restricting access through a HIP-enabled security policy.
- ✓
Check if disk encryption is enabled
Why this is correct
HIP collects disk encryption status from the endpoint via the GlobalProtect agent, reporting whether BitLocker or similar is active. This satisfies the stem's requirement for a genuine HIP capability, since HIP gathers endpoint posture data including encryption, patch level and antivirus state for policy enforcement.
- ✓
Check the operating system version
Why this is correct
HIP gathers host operating system details, including version and patch level, from the GlobalProtect agent. This satisfies the stem's requirement by enabling security policies that restrict or allow access based on whether the endpoint runs a supported, patched OS.
Go deeper
Related to this question
About these practice questions
One of 319 original PCNSE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSE practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSE exam.