Soru

Zorluk: KolayRemote Access and Site-to-Site VPN Concepts

A network administrator needs to establish an encrypted tunnel between two permanent branch office router gateways to securely interconnect their internal networks over the public Internet without installing client software on end-user devices. Which VPN deployment model best satisfies this requirement?

  1. Site-to-site IPsec VPNCevap
  2. B
    Remote access SSL/TLS VPN
  3. C
    Clientless SSL VPN
  4. D
    Remote access IPsec VPN with Cisco AnyConnect

Cevap

Site-to-site IPsec VPN is the correct deployment model because it connects fixed gateway devices (such as routers or firewalls) across the Internet, allowing hosts on both local networks to communicate securely without requiring VPN software on individual host devices.
A site-to-site IPsec VPN creates a permanent encrypted tunnel between network devices (routers or firewalls) at fixed locations. Because the gateways process encapsulation and security policies, hosts on either network communicate transparently without needing specialized VPN software.

Adım Adım Çözüm

1
Identify the connectivity endpoints specified in the scenario.
The connection is between two permanent router gateways representing static office networks.
Topologies connecting fixed infrastructure gateways use site-to-site designs, whereas topologies connecting individual mobile endpoints use remote access designs.
2
Evaluate the software client requirement.
No software client is to be installed on end-user devices.
Site-to-site VPNs handle encryption and encapsulation at the gateway level, making the tunnel completely transparent to local hosts.

Anahtar Kavram

Site-to-Site vs Remote Access VPN Architectures
Bu soruyu puanla