Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 383

An administrator wants to perform HIP checks on the endpoints to ensure their security posture.

Which license is required on all Palo Alto Networks next-generation firewalls that will be performing the HIP checks?

Answer options

• A. GlobalProtect Gateway
• B. Current and Active Support License
• C. Threat Prevention
• D. GlobalProtect Portal

Correct answer: A

Explanation

The correct answer is A, GlobalProtect Gateway, as this license is specifically required to perform HIP checks on endpoints. The other options do not provide the necessary capabilities for endpoint HIP checks, such as Current and Active Support License which relates to service support, Threat Prevention which focuses on threat detection, and GlobalProtect Portal which is more about VPN management.