Question

Difficulty: EasyRemote Access and Site-to-Site VPN Concepts

An organization is implementing a remote access Virtual Private Network (VPN) solution to enable teleworkers to connect securely to corporate resources across the public internet. Which two operational characteristics are unique to remote access VPNs compared to site-to-site VPNs? (Select two.)

  1. Connections are initiated dynamically on demand by individual user endpoints using VPN client software or a web browser.Answer
  2. User identity authentication is required using credentials such as multi-factor authentication (MFA), passwords, or digital certificates.Answer
  3. C
    Tunnels are statically configured and permanently maintained between two fixed edge router infrastructure gateways.
  4. D
    Client endpoints must share a contiguous private RFC 1918 IPv4 subnet with the internal corporate destination servers before establishing the tunnel.
  5. E
    Interior gateway routing protocols like OSPF must establish direct neighbor adjacencies over every remote client connection.

Answer

Remote access VPNs are characterized by dynamic, on-demand connections initiated from individual user devices via client software or web browsers, and user-level identity authentication using credentials like MFA or digital certificates.
The correct characteristics of a remote access VPN are dynamic on-demand connection establishment from user endpoints (via software clients or browsers) and user identity authentication through mechanisms such as MFA or user credentials. Remote access VPNs cater to roaming mobile workers rather than permanent infrastructure links.

Step-by-Step Solution

1
Analyze the connection topology for remote access VPNs versus site-to-site VPNs.
Remote access VPNs connect individual user endpoints dynamically to an enterprise gateway on demand, whereas site-to-site VPNs connect fixed network infrastructure gateways continuously.
Understanding endpoint mobility and connection initiation differentiates remote access from site-to-site topologies.
2
Identify the authentication mechanism used in remote access VPN deployments.
Remote access VPNs enforce user-level identity authentication via usernames/passwords, MFA, or user certificates.
Site-to-site VPNs authenticate gateways (peer routers/firewalls), whereas remote access VPNs authenticate individual users attempting remote entry.

Key Concept

Distinction between Remote Access VPNs and Site-to-Site VPNs
Rate this question