Remote Access and Site-to-Site VPN Concepts

An organization needs to deploy a virtual private network (VPN) solution for contractors connecting from untrusted public networks using standard web browsers without requiring software installation on their endpoint devices. Additionally, corporate policy mandates that only traffic bound for internal enterprise applications should pass through the VPN tunnel, while general internet traffic routes directly out through the local internet connection. Which VPN deployment model and traffic management feature combination fulfills these security and operational requirements?

A financial enterprise requires a secure connection for dynamic, roaming field auditors back to corporate headquarter applications while allowing them to maintain simultaneous access to local subnet resources such as home printers. Concurrently, the organization must maintain a permanent, always-on encrypted connection between a fixed regional branch router and the headquarter security appliance to route entire subnet traffic transparently.

Which architectural combination correctly satisfies the operational requirements for both deployment models?

Match each IPsec VPN framework component or feature on the left with its correct primary operational function on the right.

Match each VPN deployment scenario or operational requirement on the left with the corresponding VPN technology or protocol implementation on the right.

An enterprise needs to grant external consultants secure access to web-based internal applications from their personal, unmanaged laptops. The security policy strictly forbids requiring local administrative rights or installing persistent client software on the end-user endpoints. Which VPN deployment model best satisfies these operational constraints?

A network security administrator is designing an IPsec site-to-site VPN to interconnect a main office and a remote branch office across the Internet. Which TWO statements correctly describe the operational functions and behavior of IPsec framework protocols in this deployment?

Match each VPN operational feature or protocol component on the left with its corresponding functional description on the right.

An enterprise requires remote employees using corporate laptops to establish a secure network-layer tunnel back to the headquarters firewall. The solution must support all IP-based applications and operate seamlessly across restrictive public networks by encapsulating traffic inside TLS or DTLS on port 443. Which VPN technology should the administrator deploy to satisfy these requirements?