220-1002 Question #549: Real Exam Question with Answer & Explanation

The correct answer is B: Firewall. When a VPN connects successfully but a remote technician still cannot reach the workstation, the SOHO router firewall is the most likely cause because it may be blocking the specific remote access port or protocol independent of the VPN tunnel.

Question

A user in a SOHO wants to allow Joe, a remote technician, to connect securely to the user's workstation. Joe informs the user that the VPN was successful, but he still cannot connect. Which of the following settings in the SOHO router MOST likely need to be adjusted?

Options

AEncryption
BFirewall
CDHCP
DDNS
ENAT

Explanation

When a VPN connects successfully but a remote technician still cannot reach the workstation, the SOHO router firewall is the most likely cause because it may be blocking the specific remote access port or protocol independent of the VPN tunnel.

Common mistakes.

A. Encryption settings govern the VPN tunnel itself, which is already confirmed working, so changing encryption parameters would not resolve a post-tunnel connectivity failure.
C. DHCP manages IP address lease assignments and does not control whether an established connection can reach a specific workstation behind the router.
D. DNS handles hostname-to-IP resolution and, while a misconfiguration could cause name lookup failures, a VPN connecting successfully indicates the tunnel is functional and DNS is not the primary blocker.
E. NAT is typically bypassed once a VPN tunnel is established, and since the VPN connection succeeded, NAT traversal is confirmed and is not the blocking factor.

Concept tested. SOHO router firewall blocking remote access over VPN

Reference. https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice