Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 333

What happens, by default, when the GlobalProtect app fails to establish an IPSec tunnel to the GlobalProtect gateway?

Answer options

• A. It tries to establish a tunnel to the GlobalProtect portal using SSL/TLS.
• B. It stops the tunnel-establishment processing to the GlobalProtect gateway immediately.
• C. It tries to establish a tunnel to the GlobalProtect gateway using SSL/TLS.
• D. It keeps trying to establish an IPSec tunnel to the GlobalProtect gateway.

Correct answer: C

Explanation

The correct answer is C because when the GlobalProtect app cannot establish an IPSec tunnel, it defaults to trying to establish a connection using SSL/TLS instead. Options A and D are incorrect because they reference attempts to connect to the portal or a continuous attempt to establish the IPSec tunnel, neither of which is the default behavior. Option B is also incorrect as it suggests an immediate halt, which is not the case.