Which method of access can be used to support Microsoft Remote Desktop (RDP) access from internet kiosks?
- A . Microsoft RDP client
- B . Pulse SAM
- C . Core HTML5
- D . SAML
True or False: Pulse Connect Secure supports Multifactor Authentication.
- A . true
- B . false
A
Explanation:
Reference: https://www.okta.com/integrations/mfa-for-vpn/pulse-secure/
What Access Management Framework function determines what internal system users can access?
- A . Authentication Realm
- B . User Role
- C . Resource Policy
- D . Resource Profile
A
Explanation:
Reference: https://www-prev.pulsesecure.net/download/techpubs/current/606/pulse-policy-secure/pps/5.3rx/ps-pps-ic-5.3-device-access-management-framework.pdf (18)
Pulse client’s location awareness rules allow an endpoint to initiate connection based upon which options: (Choose two.)
- A . Physical interface
- B . Routing table
- C . Endpoint OS
- D . DNS
A,D
Explanation:
Reference: https://docs.pulsesecure.net/WebHelp/PDC/9.0R1/Content/PDC_AdminGuide_9.0R1/Configuring_Location_Awareness.htm
Which element cannot be configured when creating Web Resource Profiles?
- A . Specify web access control policy.
- B . Specify a realm to assign the profile.
- C . Specify authentication policies.
- D . Specify a Base URL.
- E . Assign roles to the bookmark.
A
Explanation:
Reference: https://docs.pulsesecure.net/WebHelp/Content/PCS/PCS_AdminGuide_8.2/Defining%20W eb %20Resource%20Profile.htm
Which of the following are NOT required in an active/active cluster? (Choose two.)
- A . A virtual IP address (VIP) configured on the PCS
- B . An external load balancer
- C . IP connectivity between nodes
- D . All nodes having IP addresses in the same IP subnet
C,D
Explanation:
Reference: https://docs.pulsesecure.net/WebHelp/Content/PCS/PCS_AdminGuide_8.2/Configuring%2 0an %20Active%20Active.htm
The default maximum local log file size is:
- A . 100 MB
- B . 200 MB
- C . 500 MB
- D . 1000 MB
B
Explanation:
Reference: https://docs.pulsesecure.net/WebHelp/PPS/9.0R3/Content/PPS_Admin_Guide/Configuring_Log_Events_Settings.htm#:~:text=Specify%20the%20maximum%20size%20of,formatted%20with%20the%20Standard%20format.
Which MDM solutions are supported by PCS? (Choose three.)
- A . AirWatch
- B . MobileIron
- C . Microsoft Intune
- D . Pulse Workspace
A,B,D
Explanation:
Reference: https://remote.uwo.ca/downloads/ps-pcs-sa-9.1r8.0-supportedplatforms.pdf (15)
While browsing Web sites that are being rewritten by the PCS device, users encounter several SSL-enabled sites that appear to have invalid certificates.
What are three ways that the administrator could configure the PCS device to respond? (Choose three.)
- A . The PCS device can allow access without warning the user.
- B . The PCS device displays only static content.
- C . The PCS device can warn the user and allow access.
- D . The PCS device can deny access to the site.
- E . The PCS device will present a remediation page with user options.
You have configured your PCS device to use OCSP for certificate validation.
Which statement is true?
- A . The PCS device will validate certificates with the OCSP server on an on-demand basis.
- B . The PCS device will download the CRL from the OCSP server.
- C . The PCS device will periodically check user certificates with the OCSP server.
- D . The PCS device will use OCSP to download and validate the CA certificate.
D
Explanation:
Reference: https://docs.pulsesecure.net/WebHelp/PCS/9.1R4/AG/Content/PCS/PCS_AdminGuide/Configuring_Options_for_Trusted.htm
True or False: A virtual appliance can only get licenses from a virtual license server.
- A . true
- B . false
A
Explanation:
Reference: https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44443
True or False: An Active/Passive cluster requires external load balancer.
- A . true
- B . false
B
Explanation:
Reference: https://docs.pulsesecure.net/WebHelp/PCS/8.3R3/Content/PCS/PCS_AdminGuide_8.3/Configuring_an_Active_Passive.htm
Which user role is configured by default?
- A . Users
- B . Partners
- C . Read Only Administrators
- D . Contractors
A
Explanation:
Reference: https://docs.pulsesecure.net/WebHelp/PCS/8.3R1/Content/PCS/PCS_AdminGuide_8.3/Defining_a_User_Role.htm
What PCS Element determines the access methods and services to be used and sets the appearance of the start page for agentless access?
- A . User Realm
- B . User Role
- C . Resource Policy
- D . Sign-in Policy
B
Explanation:
Reference: https://www-prev.pulsesecure.net/download/techpubs/current/1467/pulse-policy-secure/pps/9.0rx/ps-pps-ic-9.0r3-admin-guide.pdf (96)
True or False: Pulse Connect Secure virtual appliances are available for AWS and Azure?
- A . true
- B . false
A
Explanation:
Reference: https://www-prev.pulsesecure.net/download/techpubs/current/1558/pulse-connect-secure/pcs/9.0rx/ps-pcs-9.0r4-aws-deployment-guide.pdf
What is the maximum number of nodes SUPPORTED in an Active/Active cluster of PSA7000?
- A . 2
- B . 4
- C . 6
- D . 8
D
Explanation:
Reference: https://docs.pulsesecure.net/WebHelp/PPS/9.1R8/AG/Topics/PPS_Clustering.htm
Which custom expression would allow users to login only during business hours (8:00AM to 5:00PM, Monday through Friday)?
- A . (loginTime.dayofWeek = (Mon – Fri) AND loginTime in (8:00AM – 5:00PM))
- B . (loginTime.dayofWeek = (Mon – Fri) AND loginTime = (08:00 – 17:00))
- C . (loginTime.Weekday = (Mon – Fri) AND loginTime in (08:00 – 17:00))
- D . (loginTime.day = (Mon – Fri) AND loginTime = (8:00AM – 5:00PM))
Connection set connection options allow for configuration of which option?
- A . User configuration
- B . User access
- C . Endpoint security
- D . List of Connection URLs
C
Explanation:
Reference: https://docs.pulsesecure.net/WebHelp/PDC/9.1R5/pdc-admin-guide/ConfigPCS/ConfigPCS.htm#XREF_74630_Pulse_Client
In the authentication process, after successfully validating the users credentials against the configured authentication server, what does Pulse Connect Secure do next?
- A . Evaluates Realm Host-Check policy.
- B . Begins the Authorization Process.
- C . Evaluates the certificate on the endpoint.
- D . Begins the Return Attribute Process
True or False: Pulse Connect Secure offers endpoint health check validation.
- A . true
- B . false
A
Explanation:
Reference: https://docs.pulsesecure.net/WebHelp/PCS/8.3R1/Content/PCS/PCS_AdminGuide_8.3/Configuring_a_Statement_of.htm
Which option is NOT supported when defining an Active Directory server?
- A . Domain/NetBIOS Name
- B . Directory filter
- C . Kerberos realm
- D . Container path
Realm and Role assignment information can be found in which log type?
- A . Event
- B . Authentication
- C . User Access
- D . Admin Access
True or False: Meeting (MTG) license is not required for the Pulse Collaboration feature.
- A . true
- B . false
B
Explanation:
Reference: https://community.pulsesecure.net/t5/Pulse-Connect-Secure/check-meeting-licenses/td-p/38026
True or False: In a clustered environment, each PCS node performs Auto Leasing by itself.
- A . true
- B . false
Which of the following are mandatory when deploying a Connect Secure cluster? (Choose two.)
- A . Cluster members must run the same software version.
- B . Cluster members must use the same hardware or virtual hardware platform.
- C . Cluster members must have their external ports reachable over the internet.
- D . Cluster members must always have both their internal and external ports configured.
A,B
Explanation:
Reference: https://docs.pulsesecure.net/WebHelp/PPS/9.1R8/AG/Topics/PPS_Clustering.htm
When configuring a realm to require multiple sign-in credentials, which three are valid secondary authentication methods? (Choose three.)
- A . Active Directory
- B . Client certificate
- C . RADIUS
- D . LDAP
- E . Netegrity
Which two elements do detailed resource policy rules contain? (Choose two.)
- A . role
- B . resources
- C . rule name
- D . action
B,D
Explanation:
Reference: https://docs.pulsesecure.net/WebHelp/Content/PCS/PCS_AdminGuide_8.2/Resource%20Policies.htm
During the login process user attributes can be collected from where?
- A . LDAP
- B . SNMP
- C . LLDP
- D . CDP
- E . PROFILER
What important condition must be met for Kerberos SSO to function?
- A . NTLM protocol sync
- B . User access compatibility
- C . CA Certificate authentication to Active Directory
- D . Time sync between Connect Secure and Active Directory
C
Explanation:
Reference: https://docs.pulsesecure.net/WebHelp/PPS/9.0R3/Content/PPS_Admin_Guide/Enabling_Kerberos_SSO.htm
Authentication Realms specify the authentication server, authentication policy, user directory/attribute store and what other element?
- A . Radius Attribute Policy
- B . Sign-in Notification
- C . Role-mapping Rules
- D . Authentication Protocol Set
C
Explanation:
Reference: https://docs.pulsesecure.net/WebHelp/PPS/9.1R8/AG/Topics/PPS_Roles_Realms_Sign-In_Policy.htm