During a recent audit of servers, a company discovered that a network administrator, who required remote access, had deployed an unauthorized remote access application that communicated over common…

Question

Options

• AImplement an IPS to block the application on the network
• BImplement the remote application out to the rest of the servers
• CImplement SSL VPN with SAML standards for federation
• DImplement an ACL on the firewall with NAT for remote access

• A
  4% (2)
• B
  2% (1)
• C
  85% (40)
• D
  9% (4)

Explanation

Implementing an SSL VPN with SAML standards for federation is the most appropriate solution. The core problem is that a network administrator deployed an unauthorized, unmanaged remote access tool. The correct response is to replace it with a properly sanctioned, enterprise-grade solution. SSL VPN provides encrypted, authenticated remote access. SAML-based federation allows integration with the company's identity provider, ensuring centralized authentication, auditing, and access control. Option A (IPS to block the application) is reactive and may also block legitimate traffic on those same common ports. Option B (rolling out the unauthorized app to all servers) normalizes an unvetted, unmanaged application - a security risk. Option D (ACL with NAT) provides connectivity but not the authentication, encryption, and identity federation that a proper remote access solution requires.

No community discussion yet for this question.