PCNSE Deploy and Configure Firewalls Practice Question
Which THREE of the following are mandatory components for GlobalProtect client connectivity?
⚠ Common exam trap
Many candidates confuse optional features like client certificates or DNS suffixes with mandatory components, but the exam specifically tests that only the portal, gateway, and authentication profile are required for the client to establish connectivity.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Authentication profile.
The GlobalProtect portal and gateway are the two fundamental server-side components required for client connectivity. The portal provides the initial configuration, including gateway lists and client settings, while the gateway terminates the VPN tunnel and enforces security policies. An authentication profile is mandatory because the portal must verify the user's identity before the client can download the portal configuration and subsequently connect to a gateway.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Authentication profile.
Why this is correct
Users must be authenticated to connect.
- ✗
Client certificate.
Why it's wrong here
Client certificates are optional; other authentication methods can be used.
- ✗
DNS suffix.
Why it's wrong here
DNS suffix is optional for client configuration.
- ✓
Gateway configuration.
Why this is correct
The gateway terminates the VPN tunnel.
- ✓
Portal configuration.
Why this is correct
The portal provides the client with gateway information.
Go deeper
Related to this question
About these practice questions
One of 504 original PCNSE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSE practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSE exam.