Examkin

Question

Difficulty: MediumRemote Access and Site-to-Site VPN Concepts

A company needs to provide temporary access to internal web application portals for third-party contractors working from unmanaged personal computers. The security policy mandates that no client software or persistent VPN configuration profiles can be pre-installed on these contractor endpoints. Which VPN technology best satisfies this operational requirement?

  1. Clientless SSL VPNAnswer
  2. B
    IPsec Site-to-Site VPN
  3. C
    Remote Access IPsec VPN using Cisco AnyConnect
  4. D
    GRE over IPsec Tunnel

Answer

Clientless SSL VPN provides browser-based secure access to internal resources without requiring client software installation on remote endpoints.
Clientless SSL VPN creates a secure session through a standard web browser using HTTPS/TLS. It allows remote users on unmanaged computers to access internal enterprise web applications without installing software applications or VPN adapter drivers on their machines.

Step-by-Step Solution

1
Analyze the endpoint software requirements
The scenario requires zero endpoint client installation or pre-configuration on contractor devices.
Unmanaged personal devices cannot be enforced to carry persistent corporate VPN client software.
2
Compare remote access deployment options
Clientless SSL VPN utilizes native web browsers (using HTTPS/TLS) to authenticate users and proxy internal web application access.
Web browsers act as the client interface, eliminating the need for dedicated software installation.

Key Concept

Clientless SSL VPN vs Client-based Remote Access and Site-to-Site VPNs
Rate this question

Topics

Remote Access and Site-to-Site VPN Concepts

More questions from this topic