What is a function of a remote access VPN?

While remote access VPNs use cryptographic tunneling, this choice describes a general VPN characteristic and doesn't specify the *remote access* function for individual users accessing internal resources, which choice D defines more precisely.

This is incorrect because remote access VPNs are utilized precisely when a user is *not* physically connected to the company's internal network, but rather accessing it from an external location.

Establishing a secure tunnel between two branch sites describes a site-to-site VPN, which is a different use case than remote access for individual users.

Remote access VPNs are specifically designed to enable individual remote users to securely access corporate network resources. They establish an encrypted tunnel from the user's device, typically over the public internet, to a VPN concentrator within the corporate network, making internal resources accessible as if the user were physically on-site.