Peter, a system administrator working at a reputed IT firm, decided to work from his home and login remotely. Later, he anticipated that the remote connection could be exposed to session hijacking. To

A DMZ is a perimeter network segment that isolates public-facing servers from internal networks but does not create an encrypted tunnel for secure remote user connectivity.

SMB signing authenticates Server Message Block communications to prevent relay and tampering attacks on file sharing, but it does not provide a general-purpose encrypted tunnel for remote connections.

A VPN (Virtual Private Network) establishes an encrypted tunnel over a public network, ensuring data confidentiality and integrity between the user and the destination. It uses encryption protocols to prevent attackers from decrypting intercepted traffic, directly addressing the session hijacking concern Peter identified. This makes it the standard solution for secure remote access to corporate resources.

A switched network refers to packet-switched or network-switching topology and provides no encryption or tunneling capability to protect remote sessions.