CAS-002 · Question #107
A growing corporation is responding to the needs of its employees to access corporate email and other resources while traveling. The company is implementing remote access for company laptops. Which…
The correct answer is A. Virtual Private Network D. Multifactor authentication for users. Remote access for company laptops requires a VPN to encrypt the network tunnel and multifactor authentication to strongly verify user identity before granting corporate access.
Question
A growing corporation is responding to the needs of its employees to access corporate email and other resources while traveling. The company is implementing remote access for company laptops. Which of the following security systems should be implemented for remote access? (Select TWO).
Options
- AVirtual Private Network
- BSecure Sockets Layer for web servers
- CNetwork monitoring
- DMultifactor authentication for users
- EFull disk encryption
- FIntrusion detection systems
How the community answered
(43 responses)- A88% (38)
- B2% (1)
- E2% (1)
- F7% (3)
Why each option
Remote access for company laptops requires a VPN to encrypt the network tunnel and multifactor authentication to strongly verify user identity before granting corporate access.
A VPN creates an encrypted tunnel between the remote laptop and the corporate network, protecting all data in transit and extending corporate network controls to users operating over untrusted public networks.
SSL for web servers secures browser-to-server HTTPS traffic for specific applications but does not provide the full network-level encrypted tunnel needed for comprehensive remote access.
Network monitoring is a detective control that identifies anomalies after events occur but does not authenticate users or protect the remote access channel itself.
Multifactor authentication requires a second verification factor beyond a password, significantly reducing the risk of unauthorized remote access from stolen or compromised credentials - a critical control for remote access.
Full disk encryption protects data stored on the laptop if the device is lost or stolen but does not secure the remote access session or the data transmitted over the network.
Intrusion detection systems detect attacks within the network perimeter but do not authenticate remote users or encrypt the remote access connection.
Concept tested: VPN and multifactor authentication for secure corporate remote access
Source: https://csrc.nist.gov/publications/detail/sp/800-77/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.