Examkin

Question

Difficulty: EasyRemote Access and Site-to-Site VPN Concepts

A network administrator needs to establish an encrypted tunnel between two permanent branch office router gateways to securely interconnect their internal networks over the public Internet without installing client software on end-user devices. Which VPN deployment model best satisfies this requirement?

  1. Site-to-site IPsec VPNAnswer
  2. B
    Remote access SSL/TLS VPN
  3. C
    Clientless SSL VPN
  4. D
    Remote access IPsec VPN with Cisco AnyConnect

Answer

Site-to-site IPsec VPN is the correct deployment model because it connects fixed gateway devices (such as routers or firewalls) across the Internet, allowing hosts on both local networks to communicate securely without requiring VPN software on individual host devices.
A site-to-site IPsec VPN creates a permanent encrypted tunnel between network devices (routers or firewalls) at fixed locations. Because the gateways process encapsulation and security policies, hosts on either network communicate transparently without needing specialized VPN software.

Step-by-Step Solution

1
Identify the connectivity endpoints specified in the scenario.
The connection is between two permanent router gateways representing static office networks.
Topologies connecting fixed infrastructure gateways use site-to-site designs, whereas topologies connecting individual mobile endpoints use remote access designs.
2
Evaluate the software client requirement.
No software client is to be installed on end-user devices.
Site-to-site VPNs handle encryption and encapsulation at the gateway level, making the tunnel completely transparent to local hosts.

Key Concept

Site-to-Site vs Remote Access VPN Architectures
Rate this question

Topics

Remote Access and Site-to-Site VPN Concepts

More questions from this topic