Examkin

Soru

Zorluk: OrtaRemote Access and Site-to-Site VPN Concepts

An enterprise requires remote employees using corporate laptops to establish a secure network-layer tunnel back to the headquarters firewall. The solution must support all IP-based applications and operate seamlessly across restrictive public networks by encapsulating traffic inside TLS or DTLS on port 443. Which VPN technology should the administrator deploy to satisfy these requirements?

  1. SSL/TLS remote access VPN utilizing a dedicated software clientCevap
  2. B
    Clientless SSL VPN accessed exclusively through a web browser portal
  3. C
    IPsec site-to-site VPN operating in transport mode between endpoints
  4. D
    Generic Routing Encapsulation (GRE) tunnel configured directly on client operating systems

Cevap

SSL/TLS remote access VPN utilizing a dedicated software client
Client-based SSL/TLS remote access VPNs (such as Cisco Secure Client / AnyConnect) create a virtual network interface on the user's endpoint, encapsulating all network-layer IP traffic inside TLS (TCP 443) or DTLS (UDP 443). This satisfies both requirements: supporting arbitrary IP applications and seamlessly bypassing restrictive firewalls.

Adım Adım Çözüm

1
Analyze the access requirement
Individual remote users (teleworkers) need full network-level IP application access from their laptops to headquarters.
Remote access VPNs are designed for individual user-to-network connections, whereas site-to-site VPNs connect entire network segments.
2
Evaluate transport and protocol constraints
Traffic must be encapsulated over SSL/TLS or DTLS using port 443 to traverse restrictive firewalls.
SSL/TLS remote access VPNs use TCP/UDP port 443, which easily passes through NAT and strict firewall rules compared to native IPsec ESP (IP protocol 50).
3
Select the appropriate client deployment model
A dedicated client software (such as Cisco AnyConnect) is required for full network-layer IP encapsulation.
Clientless SSL VPN is limited to web browser access, whereas client-based SSL VPN creates a virtual network interface that tunnels all client IP traffic.

Anahtar Kavram

SSL/TLS Remote Access VPN Client-Based Architecture vs Clientless and Site-to-Site VPNs
Tahmini Süre:1m 15s
Bu soruyu puanla

Konular

Remote Access and Site-to-Site VPN Concepts

Bu konudan daha fazla soru