nerdexam
CompTIA

CAS-002 · Question #107

A growing corporation is responding to the needs of its employees to access corporate email and other resources while traveling. The company is implementing remote access for company laptops. Which…

The correct answer is A. Virtual Private Network D. Multifactor authentication for users. Remote access for company laptops requires a VPN to encrypt the network tunnel and multifactor authentication to strongly verify user identity before granting corporate access.

Enterprise Security

Question

A growing corporation is responding to the needs of its employees to access corporate email and other resources while traveling. The company is implementing remote access for company laptops. Which of the following security systems should be implemented for remote access? (Select TWO).

Options

  • AVirtual Private Network
  • BSecure Sockets Layer for web servers
  • CNetwork monitoring
  • DMultifactor authentication for users
  • EFull disk encryption
  • FIntrusion detection systems

How the community answered

(43 responses)
  • A
    88% (38)
  • B
    2% (1)
  • E
    2% (1)
  • F
    7% (3)

Why each option

Remote access for company laptops requires a VPN to encrypt the network tunnel and multifactor authentication to strongly verify user identity before granting corporate access.

AVirtual Private NetworkCorrect

A VPN creates an encrypted tunnel between the remote laptop and the corporate network, protecting all data in transit and extending corporate network controls to users operating over untrusted public networks.

BSecure Sockets Layer for web servers

SSL for web servers secures browser-to-server HTTPS traffic for specific applications but does not provide the full network-level encrypted tunnel needed for comprehensive remote access.

CNetwork monitoring

Network monitoring is a detective control that identifies anomalies after events occur but does not authenticate users or protect the remote access channel itself.

DMultifactor authentication for usersCorrect

Multifactor authentication requires a second verification factor beyond a password, significantly reducing the risk of unauthorized remote access from stolen or compromised credentials - a critical control for remote access.

EFull disk encryption

Full disk encryption protects data stored on the laptop if the device is lost or stolen but does not secure the remote access session or the data transmitted over the network.

FIntrusion detection systems

Intrusion detection systems detect attacks within the network perimeter but do not authenticate remote users or encrypt the remote access connection.

Concept tested: VPN and multifactor authentication for secure corporate remote access

Source: https://csrc.nist.gov/publications/detail/sp/800-77/rev-1/final

Topics

#VPN#multifactor authentication#remote access#mobile workforce

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice