Palo Alto Networks SSE Engineer — Question 21

After configuring domain-based split tunnel for zoom.us, how is expected behavior on the client machine confirmed?

Answer options

• A. Verify from the routing table.
• B. Enable dump level logs on GlobalProtect Application.
• C. Verify zoom.us is resolved by the tunnel assigned DNS server.
• D. Ping zoom.us from the CLI.

Correct answer: B

Explanation

The correct answer is B because enabling dump level logs on the GlobalProtect Application provides detailed insights into the tunnel's activity, confirming the split tunneling configuration. The other options, while useful for network diagnostics, do not provide the specific confirmation of the split tunneling behavior needed in this scenario.