191 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.
This is exactly what you see during practice — question, options, and a full explanation after you answer.
An administrator notices intermittent packet loss in a GlobalProtect deployment where users connect via IPv6. Which configuration change is likely to resolve the issue if MTU fragmentation is suspected?
Adjusting the MSS (Maximum Segment Size) or MTU on the tunnel interface helps avoid fragmentation issues caused by VPN headers, which are a common cause of packet loss in tunnels.
An administrator wants to use DHCP to assign IP addresses to GlobalProtect clients. Where is this setting configured?
In the GlobalProtect Gateway configuration, under the Client Settings, the IP pool or the use of an external DHCP server can be defined.
Which CLI command is most effective for verifying if a specific packet is being blocked by a security policy in real-time?
The 'test security-policy-match' command allows the administrator to simulate a packet flow against existing security policies to see which one matches or if it is dropped.
Answer at your own pace. Explanation and domain tag shown immediately after each answer.
Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.
Full explanations on every question
Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.
Domain score breakdown
After each session see your score by exam domain so you know exactly where to focus study time.
100% free, forever
No subscription, no trial, no email wall. Start a session in under 10 seconds.
Exam-style questions
Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.