A company evaluates several options that would allow employees to have remote access to the network. The security team wants to ensure the solution includes AAA to comply with internal security…

Question

Options

• AIPSec with RADIUS
• BRDP connection with LDAPS
• CWeb proxy for all remote traffic
• DJump server with 802.1X

• A
  80% (37)
• B
  2% (1)
• C
  4% (2)
• D
  13% (6)

Explanation

IPSec with RADIUS directly satisfies all three AAA components: RADIUS (Remote Authentication Dial-In User Service) is a dedicated AAA protocol that handles Authentication (verifying who you are), Authorization (what you're allowed to access), and Accounting (logging session activity), while IPSec provides the encrypted tunnel for secure remote access - making this combination the textbook remote-access + AAA solution.

Option B (RDP with LDAPS) uses LDAPS only for secure directory-based authentication; it lacks built-in accounting and centralized authorization enforcement, so it doesn't fulfill full AAA. Option C (web proxy) routes and filters traffic but provides no AAA framework whatsoever. Option D (jump server with 802.1X) is wrong because 802.1X is a port-based access control protocol designed for wired/wireless LAN authentication, not remote-access VPN scenarios.

Memory tip: Remember "RADIUS = AAA's best friend" - whenever an exam question pairs remote access with the requirement for AAA, RADIUS is almost always part of the correct answer.

No community discussion yet for this question.