A company wants to ensure secure remote access to its internal network. The company has only one public IP and would like to avoid making any changes to the current network setup. Which of the…

Question

Options

• APAT
• BIPSec VPN
• CPerimeter network
• DReverse proxy

• A
  9% (3)
• B
  71% (25)
• C
  14% (5)
• D
  6% (2)

Explanation

IPSec VPN is correct because it creates an encrypted tunnel over the existing internet connection, allowing remote users to securely access the internal network - all through the single existing public IP with zero changes to the underlying network topology.

Why the distractors are wrong:

• A (PAT): Port Address Translation maps many private IPs to one public IP for outbound traffic - it's about address conservation, not providing inbound remote access.
• C (Perimeter network/DMZ): A DMZ requires network changes - you're adding a new network segment and reconfiguring firewalls, which directly violates the "no changes" constraint.
• D (Reverse proxy): A reverse proxy exposes specific internal services (e.g., a web app) to external clients, but it doesn't provide general-purpose secure remote access to the whole internal network.

Memory tip: When you see "secure remote access" + "minimal/no infrastructure changes," think VPN - it's literally designed to be an overlay that works on top of existing networks without restructuring them.

No community discussion yet for this question.