When designing remote access to the Enterprise Campus network for teleworkers and mobile workers, which of the following should the designer consider?

Question

Options

• AIt is recommended to place the VPN termination device in line with the Enterprise Edge firewall,
• BMaintaining access rules, based on the source IP of the client, on an internal firewall drawn from
• CVPN Headend routing using Reverse Route Injection (RRI) with distribution is recommended
• DClientless SSL VPNs provide more granular access control than SSL VPN clients (thin or thick),

• A
  12% (5)
• B
  2% (1)
• C
  5% (2)
• D
  80% (33)

Explanation

Clientless SSL VPN operates entirely through a web browser and grants access to specific, explicitly defined web-based resources and applications-making access control highly granular at the application or URL level. Full SSL VPN clients (thin or thick) establish a broader network tunnel, typically giving users IP-level access to a network segment rather than controlling access at the individual application or resource level. While full-tunnel clients offer richer network connectivity, clientless SSL VPN allows administrators to precisely define which specific resources each user or group can reach, offering finer-grained access control. The other options contain inaccuracies: placing VPN inline with the firewall (A) is not always recommended; source-IP-based rules for mobile users (B) are unreliable; and RRI with distribution (C) introduces unnecessary complexity.

No community discussion yet for this question.