Examkin

Question

Difficulty: MediumRemote Access and Site-to-Site VPN Concepts

A company requires a VPN solution for mobile employees working from personal laptops. The organization wants to grant secure remote access to internal web-based applications without requiring users to install dedicated VPN client software on their endpoints. Which VPN deployment model best satisfies this requirement?

  1. Clientless SSL VPNAnswer
  2. B
    Site-to-Site IPsec VPN
  3. C
    Client-based IPsec VPN
  4. D
    GRE tunnel with IPsec protection

Answer

Clientless SSL VPN is the appropriate solution because it provides web browser-based access to internal web applications without requiring client software installation.
Clientless SSL VPN uses standard web browsers on the user device to establish a secure SSL/TLS connection back to the corporate ASA/Secure Firewall device, permitting access to web-based internal services without requiring local administrative privileges or software installation.

Step-by-Step Solution

1
Analyze the business requirements from the scenario.
Identified key requirements: individual mobile user access (Remote Access VPN) and no pre-installed client software required on endpoints.
VPN solutions differ by topology (Site-to-Site vs Remote Access) and endpoint client requirements.
2
Evaluate candidate VPN technologies based on endpoint software requirements.
Clientless SSL VPN relies on Web browser TLS/SSL sessions, whereas IPsec and client-based SSL VPNs require dedicated software applications to be installed on the client device.
Browsers natively support TLS/SSL, eliminating client installation overhead.
3
Select the option that matches both Remote Access topology and zero-client installation requirements.
Clientless SSL VPN is chosen as the correct deployment model.
It fulfills access needs specifically for web resources without endpoint software deployment.

Key Concept

Remote Access VPN Technologies: Clientless SSL VPN vs Client-based VPN
Rate this question

Topics

Remote Access and Site-to-Site VPN Concepts

More questions from this topic