Company A has a remote work force that often includes independent contractors and out of state full time employees. Company A's security engineer has been asked to implement a solution allowing these users to collaborate on projects with the following goals:

All communications between parties need to be encrypted in transport Users must all have the same application sets at the same version All data must remain at Company A's site All users must not access the system between 12:00 and 1:00 as that is the maintenance window Easy to maintain, patch and change application environment Which of the following solutions should the security engineer recommend to meet the MOST goals?

Question

Company A has a remote work force that often includes independent contractors and out of state full time employees. Company A's security engineer has been asked to implement a solution allowing these users to collaborate on projects with the following goals:

All communications between parties need to be encrypted in transport Users must all have the same application sets at the same version All data must remain at Company A's site All users must not access the system between 12:00 and 1:00 as that is the maintenance window Easy to maintain, patch and change application environment Which of the following solutions should the security engineer recommend to meet the MOST goals?

Accepted Answer

B. Install an SSL VPN to Company A's datacenter, have users connect to a standard virtual SSL VPN provides end-to-end encrypted transport for all remote communications. A standardized virtual desktop image ensures every user runs identical application sets at the same version. Because the virtual desktop runs inside the company datacenter, all data remains on-site, and the maintenance window plus patching are centrally controlled through the image, satisfying the majority of the stated goals.

Answer

A. Create an SSL reverse proxy to a collaboration workspace. An SSL reverse proxy to a collaboration workspace does not guarantee consistent application versions across all users or ensure data remains exclusively at Company A's site.

Answer

C. Create an extranet web portal using third party web based office applications. Third-party web-based office applications store data on external servers, directly violating the requirement that all data must remain at Company A's site.

Answer

D. Schedule server downtime from 12:00 to 1:00 PM, implement a Terminal Server Gateway, A Terminal Server Gateway alone does not ensure consistent application sets for all users or provide guaranteed encrypted transport for all communication paths.

Company A has a remote work force that often includes independent contractors and out of state full time employees. Company A's security engineer has been asked to implement a solution allowing…

Question

Options

How the community answered

Why each option

Topics

Community Discussion