Examkin

Question

Difficulty: MediumVirtual Private Networks and Remote Access Security

A network administrator is configuring a remote access VPN for external contractors who need access to internal web-based applications. To comply with corporate security policies, the solution must allow access directly through a standard web browser over TCP port 443 without requiring the installation of dedicated endpoint client software on contractor devices. Which VPN technology should the administrator deploy?

  1. Clientless SSL/TLS VPNAnswer
  2. B
    Client-based IPsec VPN in Tunnel Mode
  3. C
    L2TP/IPsec VPN
  4. D
    GRE over IPsec VPN

Answer

Clientless SSL/TLS VPN is the correct solution because it operates via web browsers over TCP port 443 without requiring dedicated client software installation.
The choice specifying a Clientless SSL/TLS VPN is correct because it uses standard web technologies (HTTPS on TCP port 443) through the user's browser, satisfying the requirement to grant access to internal web applications without installing software on the client device.

Step-by-Step Solution

1
Analyze the connectivity requirements given in the scenario
Identified key requirements: browser-based access, TCP port 443 (HTTPS), and zero endpoint client software installation.
Contractors use unmanaged endpoints where installing corporate client software is prohibited or impracticable.
2
Evaluate remote access protocols against the identified requirements
SSL/TLS VPN supports a clientless portal model native to web browsers using TCP 443. IPsec, L2TP/IPsec, and GRE all require local software configuration or network equipment.
SSL/TLS functions at the Application/Transport layers, enabling HTML portal access directly.

Key Concept

Clientless SSL/TLS Remote Access VPNs
Rate this question

Topics

Virtual Private Networks and Remote Access Security

More questions from this topic