Examkin

Question

Difficulty: MediumVirtual Private Networks and Remote Access Security

A network administrator needs to grant third-party auditors access to an internal web-based financial dashboard. The security policy dictates that remote users must not be required to install dedicated client software or agent applications on their unmanaged personal endpoints, yet all session traffic must remain encrypted over the internet. Which remote access technology best meets these requirements?

  1. Clientless SSL/TLS VPNAnswer
  2. B
    IPsec VPN in Transport Mode
  3. C
    L2TP over IPsec VPN
  4. D
    PPTP with GRE Encapsulation

Answer

Clientless SSL/TLS VPN is the correct selection because it allows users to establish an encrypted session through a standard web browser using HTTPS (TCP 443) without installing remote access software.
Clientless SSL/TLS VPNs operate through standard web browsers over HTTPS (TCP port 443). Because modern web browsers natively support TLS encryption, third-party users can securely access web-based applications without downloading or installing any dedicated VPN client software on unmanaged endpoints.

Step-by-Step Solution

1
Analyze the operational constraints presented in the scenario.
Identified two primary requirements: zero endpoint client software installation (unmanaged devices) and encrypted access restricted to a web-based application.
Remote access solutions differ by encapsulation layer and client requirements.
2
Evaluate protocol architectures against the endpoint software restriction.
Clientless SSL/TLS VPN leverages existing web browser capabilities (Application layer security), eliminating the need for administrative rights or client software installation on the endpoint.
IPsec, L2TP, and PPTP all operate at lower OSI layers (Network/Data Link) and mandate host client configurations or helper software.

Key Concept

Clientless SSL/TLS VPN Architecture
Rate this question

Topics

Virtual Private Networks and Remote Access Security

More questions from this topic