Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 62

Which GlobalProtect Client connect method requires the distribution and use of machine certificates?

Answer options

• A. At-boot
• B. Pre-logon
• C. User-logon (Always on)
• D. On-demand

Correct answer: B

Explanation

The Pre-logon method is designed to authenticate the machine before any user logs in, which requires the use of machine certificates for secure communication. The other methods, such as At-boot, User-logon (Always on), and On-demand, do not necessitate machine certificates in the same manner, as they rely on user credentials or are activated by user actions.