Examkin

Question

Difficulty: MediumRemote Access and Site-to-Site VPN Concepts

An organization needs to deploy a virtual private network (VPN) solution for contractors connecting from untrusted public networks using standard web browsers without requiring software installation on their endpoint devices. Additionally, corporate policy mandates that only traffic bound for internal enterprise applications should pass through the VPN tunnel, while general internet traffic routes directly out through the local internet connection. Which VPN deployment model and traffic management feature combination fulfills these security and operational requirements?

  1. Clientless SSL VPN combined with split tunnelingAnswer
  2. B
    Site-to-Site IPsec VPN combined with full tunneling
  3. C
    Remote Access IPsec VPN combined with full tunneling
  4. D
    Clientless SSL VPN combined with full tunneling

Answer

Clientless SSL VPN combined with split tunneling
Clientless SSL VPN allows users to establish secure connections using a standard web browser without installing specialized client software on host machines. Combining this with split tunneling allows traffic destined for internal corporate servers to be encrypted and routed through the VPN tunnel, while general internet traffic bypasses the tunnel to exit locally.

Step-by-Step Solution

1
Identify the VPN access mode requirement based on endpoint capabilities.
Since remote users connect via standard web browsers without dedicated software installation, Clientless SSL VPN (WebVPN) is required.
Remote Access IPsec VPNs typically require client software installation, whereas Clientless SSL VPN provides web-browser portal access.
2
Determine the appropriate traffic routing mechanism for internet versus internal traffic.
Split tunneling must be implemented.
Split tunneling selectively encrypts and routes traffic destined for corporate subnets while permitting non-corporate internet traffic to route directly out of the local network interface.

Key Concept

Remote Access SSL VPN vs IPsec VPN characteristics and Split-Tunneling operations
Rate this question

Topics

Remote Access and Site-to-Site VPN Concepts

More questions from this topic