CAS-001 · Question #108
Company A has a remote work force that often includes independent contractors and out of state full time employees. Company A's security engineer has been asked to implement a solution allowing…
The correct answer is B. Install an SSL VPN to Company A's datacenter, have users connect to a standard virtual workstation. An SSL VPN combined with virtual workstations (a VDI - Virtual Desktop Infrastructure) approach satisfies every stated requirement: (1) SSL VPN encrypts all traffic in transit; (2) Virtual workstations are standardized images, guaranteeing all users have identical application…
Question
Company A has a remote work force that often includes independent contractors and out of state full time employees. Company A's security engineer has been asked to implement a solution allowing these users to collaborate on projects with the following goals:
- All communications between parties need to be encrypted in transport
- Users must all have the same application sets at the same version
- All data must remain at Company A's site
- All users must not access the system between 12:00 and 1:00 as that
is the maintenance window
- Easy to maintain, patch and change application environment
Which of the following solutions should the security engineer recommend to meet the MOST goals?
Options
- ACreate an SSL reverse proxy to a collaboration workspace.
- BInstall an SSL VPN to Company A's datacenter, have users connect to a standard virtual workstation
- CCreate an extranet web portal using third party web based office applications.
- DSchedule server downtime from 12:00 to 1:00 PM, implement a Terminal Server Gateway, use
How the community answered
(34 responses)- A9% (3)
- B65% (22)
- C21% (7)
- D6% (2)
Explanation
An SSL VPN combined with virtual workstations (a VDI - Virtual Desktop Infrastructure) approach satisfies every stated requirement: (1) SSL VPN encrypts all traffic in transit; (2) Virtual workstations are standardized images, guaranteeing all users have identical application sets at the same version; (3) Since users interact with virtual machines hosted in Company A's datacenter, all data remains on-site - nothing is stored on the remote user's device; (4) The maintenance window is enforced by simply shutting down access or the VMs from 12:00–1:00; (5) Patching is centralized - updating the master VM image updates all users at once. Option A (SSL reverse proxy) does not ensure consistent app versions. Option C (third-party web apps) fails the on-site data retention requirement. Option D (Terminal Server Gateway with downtime) is similar in concept but is less comprehensive and introduces unnecessary planned downtime rather than a controlled maintenance window.
Topics
Community Discussion
No community discussion yet for this question.