In SSL VPN, the firewall performs access authorization and access control based on which of the following dimensions?

Question

Options

• AIP address
• BPort number
• CMAC address
• Drole

• A
  4% (2)
• B
  16% (7)
• C
  2% (1)
• D
  78% (35)

Explanation

SSL VPN operates at the application layer and authenticates individual users, which means the firewall can enforce access policies based on user roles - granting different permissions to, say, a contractor vs. an administrator, regardless of what device or IP they connect from. This role-based model is central to SSL VPN's design: it maps authenticated identities to resources, not network addresses.

Why the distractors are wrong:

• A (IP address) - Traditional IPsec VPNs tie access to IP addresses, but SSL VPN is designed to decouple access from network location; the same user can connect from any IP.
• B (Port number) - Ports identify services/protocols, not users; port-based control is a firewall rule concept, not an SSL VPN authorization mechanism.
• C (MAC address) - MAC addresses are Layer 2 identifiers scoped to the local network segment and are trivially spoofed; SSL VPN operates over the internet where MACs are irrelevant.

Memory tip: Think "SSL VPN = Who you are, not where you are." Role-based access follows the person (authenticated identity), while IP/MAC/port control follows the machine or network path - a fundamental distinction between SSL VPN and traditional network-layer controls.

No community discussion yet for this question.