nerdexam
Isaca

CDPSE · Question #414

Which of the following is the PRIMARY reason to establish maximum idle virtual private network (VPN) times?

The correct answer is B. To protect data from unauthorized access. An idle VPN session that remains active on an unattended device can be exploited by anyone who gains physical or logical access to that machine - without needing additional credentials. Automatically terminating idle sessions limits the window of exposure and protects the data…

Privacy Architecture

Question

Which of the following is the PRIMARY reason to establish maximum idle virtual private network (VPN) times?

Options

  • ATo prevent online tracking or monitoring
  • BTo protect data from unauthorized access
  • CTo limit the number of concurrent licenses
  • DTo improve system performance

How the community answered

(48 responses)
  • A
    2% (1)
  • B
    88% (42)
  • C
    4% (2)
  • D
    6% (3)

Explanation

An idle VPN session that remains active on an unattended device can be exploited by anyone who gains physical or logical access to that machine - without needing additional credentials. Automatically terminating idle sessions limits the window of exposure and protects the data and systems accessible through the tunnel. Preventing tracking (A) is not a VPN-timeout goal. License management (C) and performance (D) may be secondary benefits but are not the primary security rationale.

Topics

#VPN security#Session management#Access control#Data protection

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice