ITPEC FE Morning October 2023 Question 42
Companies usually provide a means for their mobile workforce to access the corporate network securely over the Internet through insecure channels such as open wireless networks in hotels or coffee shops. Which of the following is the appropriate technology that can be used for this purpose?
Explanation
VPN (Virtual Private Network) — it builds an encrypted tunnel across an untrusted network so remote staff can reach the corporate network safely.
A mobile worker on hotel or coffee-shop Wi-Fi cannot trust the local network. A VPN client authenticates to the company's VPN gateway and encapsulates all traffic in an encrypted tunnel (IPsec or TLS). Inside the tunnel the worker's device behaves as if it were on the internal LAN, while anyone on the open wireless network sees only ciphertext.
Answer (d)
Why not others:
- •(a) DMZ — a network segment between the Internet and the internal LAN where public servers (web, mail) are placed; it limits exposure but gives remote users no secure path in
- •(b) SNMP — a protocol for monitoring and managing network devices, not for user access
- •(c) VoIP — carries voice calls over IP; it has nothing to do with securing access to the corporate network
Key rule: Secure remote access over a public or untrusted network means a VPN: authentication plus an encrypted tunnel to the corporate gateway.
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.