PCNSE Core Concepts and Architecture Practice Question
Which THREE of the following are core components of the GlobalProtect solution? (Choose exactly three.)
⚠ Common exam trap
The trap here is that candidates often mistake the GlobalProtect Mobile App as a core component, but it is simply a variant of the GlobalProtect Client and not one of the three fundamental architectural elements.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
GlobalProtect Gateway
The three core components of the GlobalProtect solution are the GlobalProtect Portal (E), the GlobalProtect Gateway (B), and the GlobalProtect Client (C). The GlobalProtect Portal (E) is the web-based interface that authenticates end users, distributes the GlobalProtect agent/app and its configuration, and provides the list of available gateways. The GlobalProtect Gateway (B) is the security appliance (firewall or Prisma Access) that terminates the tunnels and enforces security policy, providing access to internal resources. The GlobalProtect Client (C) is the agent software installed on endpoints (Windows, macOS, Linux, iOS, Android) that connects to the portal and gateway to establish the VPN connection. The GlobalProtect License Server (A) is not a core component; licensing is managed through the firewall or Panorama, not a separate license server. The GlobalProtect Mobile App (D) is not a distinct core component — mobile support is delivered via the GlobalProtect Client (the app is simply the client for mobile platforms), so it is not counted separately.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
GlobalProtect License Server
Why it's wrong here
A GlobalProtect license server only validates subscriptions for the agent, so it is not a core solution component; the portal, gateway and agent are. It is tempting because licensing sounds infrastructural, but it is an optional supporting service, not part of the connection architecture.
- ✓
GlobalProtect Gateway
Why this is correct
The GlobalProtect Gateway is a core component, terminating client tunnels and enforcing security policy for remote users. It works alongside the portal and the agent to deliver the solution, making it one of the three required components.
- ✓
GlobalProtect Client
Why this is correct
The GlobalProtect Client is the endpoint agent installed on user devices that establishes the tunnel to the gateway, enforcing security policy and posture checks. It is one of the three core components, alongside the portal and gateway, required for the solution to function.
- ✗
GlobalProtect Mobile App
Why it's wrong here
The GlobalProtect mobile app is an endpoint client for iOS and Android, not a core solution component; the core set comprises the portal, gateway and agent. It is tempting because mobile devices do connect via GlobalProtect, but the app is optional client software, not required architecture.
- ✓
GlobalProtect Portal
Why this is correct
The GlobalProtect Portal is the core component that authenticates users, delivers client configuration and gateway lists, and manages endpoint posture. It is one of the three essential components, alongside the client and gateway, that constitute the GlobalProtect solution.
Go deeper
Related to this question
About these practice questions
This PCNSE question is part of Courseiva's 319-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSE practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSE exam.