A company currently does not use any type of authentication or authorization service for remote access. The new security policy states that all remote access must be locked down to only authorized…

A VPN concentrator provides centralized authentication and authorization for remote users, ensuring only approved personnel can establish encrypted tunnels to the corporate network. It directly addresses the policy requirement that all remote access be restricted to authorized personnel.

A firewall inspects and filters traffic based on rules at the perimeter, enabling the organization to allow only authorized external networks to reach specific internal resources. This enforces the second policy requirement regarding network-level access control.

A proxy server intermediates client web requests for caching or content filtering but does not provide remote access authentication or perimeter network access control.

A WAP (Wireless Access Point) provides local wireless LAN connectivity and is not a perimeter device for securing remote access or restricting external network traffic.

A Layer 2 switch operates at the data link layer to forward frames within a LAN segment and provides no authentication, authorization, or perimeter filtering capabilities.