Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 354

During a laptop-replacement project, remote users must be able to establish a GlobalProtect VPN connection to the corporate network before logging in to their new Windows 10 endpoints.

The new laptops have the 5.2.10 GlobalProtect Agent installed, so the administrator chooses to use the Connect Before Logon feature to solve this issue.

What must be configured to enable the Connect Before Logon feature?

Answer options

• A. The Certificate profile in the GlobalProtect Portal Authentication Settings.
• B. Registry keys on the Windows system.
• C. The GlobalProtect Portal Agent App Settings Connect Method to Pre-logon then On-demand.
• D. X-Auth Support in the GlobalProtect Gateway Tunnel Settings.

Correct answer: B

Explanation

To enable the Connect Before Logon feature, specific registry keys must be set on the Windows system, making option B the correct choice. The other options, while related to different aspects of GlobalProtect configuration, do not directly pertain to the implementation of Connect Before Logon.