A network engineer must ensure that always-on VPN access is enabled Curt restricted to company assets. Which of the following best describes what the engineer needs to do?

The correct answer is A. Generate device certificates using the specific template settings needed. Generating device certificates with specific template settings allows the VPN solution to authenticate and restrict access strictly to company-managed devices. This enforces always-on VPN policies while preventing unauthorized devices from connecting.

Submitted by kim_seoul· Mar 6, 2026Security Engineering

Question

Options

AGenerate device certificates using the specific template settings needed
BModify signing certificates in order to support IKE version 2
CCreate a wildcard certificate for connections from public networks
DAdd the VPN hostname as a SAN entry on the root certificate

How the community answered

(39 responses)

A
79% (31)
B
13% (5)
C
3% (1)
D
5% (2)

Explanation

Generating device certificates with specific template settings allows the VPN solution to authenticate and restrict access strictly to company-managed devices. This enforces always-on VPN policies while preventing unauthorized devices from connecting.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice