nerdexam
CompTIA

CAS-003 · Question #237

An educational institution would like to make computer labs available to remote students. The labs are used for various IT networking, security, and programming courses. The requirements are: Each…

The correct answer is C. IPSec VPN with mutual authentication for remote connectivity, RADIUS for authentication, ACLs. IPSec VPN with mutual authentication meets the certificates requirements. RADIUS can be used with the directory service for the user authentication. ACLs (access control lists) are the best solution for restricting access to network hosts.

Enterprise Security Architecture

Question

An educational institution would like to make computer labs available to remote students. The labs are used for various IT networking, security, and programming courses. The requirements are:

Each lab must be on a separate network segment. Labs must have access to the Internet, but not other lab networks. Student devices must have network access, not simple access to hosts on the lab networks. Students must have a private certificate installed before gaining access. Servers must have a private certificate installed locally to provide assurance to the students. All students must use the same VPN connection profile. Which of the following components should be used to achieve the design in conjunction with directory services?

Options

  • AL2TP VPN over TLS for remote connectivity, SAML for federated authentication, firewalls
  • BSSL VPN for remote connectivity, directory services groups for each lab group, ACLs on routing
  • CIPSec VPN with mutual authentication for remote connectivity, RADIUS for authentication, ACLs
  • DCloud service remote access tool for remote connectivity, OAuth for authentication, ACL on

How the community answered

(19 responses)
  • A
    5% (1)
  • B
    5% (1)
  • C
    68% (13)
  • D
    21% (4)

Explanation

IPSec VPN with mutual authentication meets the certificates requirements. RADIUS can be used with the directory service for the user authentication. ACLs (access control lists) are the best solution for restricting access to network hosts.

Topics

#VPN#network segmentation#mutual certificate authentication#RADIUS

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice