What type of technology is currently considered the preferred method for securely connecting a remote endpoint device back to an enterprise network?

Question

Exhibit

Options

• Apoint-to-point tunneling protocol (PPTP)
• Bsecure socket tunneling protocol (SSTP)
• CInternet Protocol Security (IPSec)
• DSecure Sockets Layer (SSL)

• A
  11% (3)
• B
  4% (1)
• C
  7% (2)
• D
  78% (21)

Explanation

SSL VPNs are the current preferred method for secure remote access because they operate over standard HTTPS (port 443), require no special client software beyond a browser, and work through firewalls and NAT without extra configuration - making them both secure and practical for modern enterprise environments.

Why the distractors are wrong:

• A (PPTP) is outdated and cryptographically broken - it uses weak authentication and is easily compromised; no security-conscious organization should be using it.
• B (SSTP) is a valid SSL-based tunneling protocol, but it's Windows-specific and far less widely adopted than general SSL VPN solutions.
• C (IPSec) is strong and widely used, but it requires complex client configuration, struggles with NAT traversal, and is harder to deploy at scale compared to SSL.

Memory tip: Think "SSL = Simple, Scalable, and everywhere" - since SSL runs on port 443 (the same as HTTPS), it "looks like" normal web traffic, making it the go-to choice for remote access in the real world and on exams.

No community discussion yet for this question.