Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 408

Which GlobalProtect gateway setting is required to enable split-tunneling by access route, destination domain, and application?

Answer options

• A. Satellite mode
• B. Tunnel mode
• C. No Direct Access to local networks
• D. IPSec mode

Correct answer: B

Explanation

The correct answer is B, Tunnel mode, as it allows the configuration of split-tunneling based on various criteria. The other options, such as Satellite mode and IPSec mode, do not provide the same level of granularity for controlling traffic, while 'No Direct Access to local networks' is a restrictive setting, not a mode for enabling split-tunneling.