100-160 · Question #3
You are planning to work from home. Your company requires that you connect to the company network through a VPN. Which three critical functions do VPNs provide to remote workers? (Choose three.)
The correct answer is C. Integrity of data D. Authentication of users E. Confidentiality of information. Authentication of users: VPNs verify the identity of users to ensure only authorized individuals can access the company network. Integrity of data: VPNs ensure the data transmitted between the remote worker and company network is not altered or tampered with. Confidentiality of…
Question
You are planning to work from home. Your company requires that you connect to the company network through a VPN. Which three critical functions do VPNs provide to remote workers? (Choose three.)
Options
- AWAN management
- BAuthorization of users
- CIntegrity of data
- DAuthentication of users
- EConfidentiality of information
- FPassword management
How the community answered
(36 responses)- B3% (1)
- C94% (34)
- F3% (1)
Explanation
Authentication of users: VPNs verify the identity of users to ensure only authorized individuals can access the company network. Integrity of data: VPNs ensure the data transmitted between the remote worker and company network is not altered or tampered with. Confidentiality of information: VPNs encrypt data to keep it private and protect sensitive information from being intercepted by unauthorized parties.
Topics
Community Discussion
4The answer is C, D, E. VPNs are built around three core security pillars: they encrypt your traffic so that confidentiality of information is maintained even over a public or untrusted connection, they use certificates or credentials to handle authentication of users so only legitimate people get in, and they use hashing mechanisms like SHA to verify integrity of data so nothing gets tampered with in transit. A and F are red herrings because WAN management and password management are not functions the VPN itself provides. B trips people up because authorization (what you can do after you get in) is typically handled by the network infrastructure or directory services, not the VPN tunnel itself. Remember it this way: CIA minus the first letter, so CIE, or just think encryption plus login plus tamper-check.
C, D, and E are correct, and this is one of those questions where the wrong answers are designed to trip you up if you mix up security concepts with network management tasks. VPNs are built around three core jobs: encrypting your traffic so nobody on the wire can read it (confidentiality), verifying that you are who you say you are before letting you in (authentication), and making sure the data arrives exactly as it was sent with no tampering in between (integrity). Authorization in option B is close enough to sound right, but authorization is about what resources you can access once you are inside, and that work is typically handled by directory services or access control policies, not the VPN tunnel itself. If you remember that VPNs map to the classic CIA triad of confidentiality, integrity, and authentication, this type of question gets a lot easier to sort out quickly on test day.
Worth a small correction before test day, the triad she is calling "CIA" is actually mixing two frameworks, because the real CIA triad swaps authentication out for availability, and authentication belongs to AAA (Authentication, Authorization, Accounting), so keeping those two frameworks separate in your head will save you on questions that test both.
Saw this exact scenario on my practice test last week, kept second-guessing B but VPNs handle auth, not account setup, so C, D, E locked it in.