Examkin

Question

Difficulty: MediumRemote Access and Site-to-Site VPN Concepts

Match each VPN implementation type or protocol combination on the left with its corresponding operational characteristic on the right.

  • Clientless SSL VPNProvides remote access to web-based applications using a standard web browser without requiring dedicated client software installation.
  • IPsec Site-to-Site VPNEstablishes a static, encrypted tunnel between two permanent gateway devices across an untrusted public network.
  • GRE over IPsec VPNEncapsulates IP multicast and routing protocol traffic into a tunnel before encrypting the transport payload.
  • Client-based Remote Access VPNRequires dedicated endpoint software to provide full network-level (Layer 3) access to internal resources for remote users.

Answer

Clientless SSL VPN matches browser-based access without dedicated software; IPsec Site-to-Site VPN matches static tunnel connecting permanent gateways; GRE over IPsec VPN matches encapsulation of multicast and routing protocols before encryption; Client-based Remote Access VPN matches endpoint software providing full Layer 3 access.
Each match correctly aligns the VPN architecture with its technical implementation constraint. Clientless SSL VPN enables browser-only web access without software installation; IPsec Site-to-Site securely interconnects fixed branch locations; GRE over IPsec allows multicast and dynamic routing over an encrypted tunnel; Client-based Remote Access VPN utilizes software installed on the endpoint to provide full Layer 3 network connectivity.

Step-by-Step Solution

1
Analyze the requirements for remote access vs site-to-site topologies.
Identified that fixed gateway connectivity corresponds to Site-to-Site IPsec, while individual end-user connection models split into Clientless and Client-based Remote Access VPNs.
Topology type dictates whether gateways or endpoints initiate and terminate the tunnel.
2
Differentiate Clientless SSL VPN from Client-based Remote Access VPN.
Clientless uses web browsers for web application proxy access; Client-based requires installed software (e.g., AnyConnect) for full Layer 3 subnet connectivity.
Client software determines the depth of network access provided to the endpoint device.
3
Evaluate transport limitations of IPsec vs GRE over IPsec.
Native IPsec only supports IP unicast packets, requiring GRE encapsulation to carry routing protocol multicast packets through an IPsec encrypted tunnel.
Dynamic routing protocols depend on multicast packets to form neighbor adjacencies across VPN tunnels.

Key Concept

Remote Access and Site-to-Site VPN Architectures and Capabilities
Rate this question

Topics

Remote Access and Site-to-Site VPN Concepts

More questions from this topic