Examkin

Question

Difficulty: MediumVirtual Private Networks and Remote Access Security

An organization needs to grant remote workers secure access to corporate web applications from unmanaged personal devices. Corporate policy prohibits installing dedicated VPN software or administrative agents on these personal endpoints while requiring full encryption for all remote web traffic. Which protocol and transport layer configuration must be permitted on the perimeter firewall to support this clientless remote access design?

  1. SSL/TLS operating over TCP port 443Answer
  2. B
    L2TP operating over TCP port 1701
  3. C
    IPsec IKE operating over TCP port 500
  4. D
    GRE encapsulation operating over UDP port 47

Answer

SSL/TLS operating over TCP port 443 is the correct choice because clientless SSL VPN portals leverage standard web browsers using HTTPS without requiring endpoint client installation.
Clientless SSL/TLS VPN portals permit users to establish encrypted remote sessions to internal web applications directly through a standard web browser. Because web browsers natively handle TLS encryption over TCP port 443, no client software installation is required on the user's personal device.

Step-by-Step Solution

1
Analyze the endpoint restriction requirements
Unmanaged personal endpoints cannot have third-party VPN client software installed.
The requirement specifies a clientless solution for remote web application access.
2
Identify the protocol compatible with clientless browser access
SSL/TLS (HTTPS) provides secure browser-based portal sessions.
Standard web browsers natively support SSL/TLS encryption without additional software.
3
Determine the transport protocol and port number
SSL/TLS for web traffic operates over TCP port 443.
Perimeter firewalls must allow TCP port 443 for HTTPS/SSL VPN portal traffic.

Key Concept

Clientless SSL/TLS Remote Access VPN
Rate this question

Topics

Virtual Private Networks and Remote Access Security

More questions from this topic