CompTIA Network+ (N10-009)Network OperationsHard
A company wants remote contractors to access only a single internal web-based ticketing application without granting them broader access to the internal network or requiring installation of a full VPN client. Which remote access solution best fits this requirement?
- AFull-tunnel IPSec client VPN
- BLayer 2 VPN (L2TP without IPSec)
- CClientless SSL VPN portal
- DSite-to-site IPSec VPN in tunnel mode
Show answer & explanationAnswer & explanation
Correct answer: C. Clientless SSL VPN portal
A clientless SSL VPN provides browser-based access to specific applications (like a web portal) without requiring installed client software or granting broad network-layer access, making it ideal for limited, application-specific remote access.
Why the other options are wrong
- A. A full-tunnel IPSec VPN grants broad network-layer access, exceeding what's needed and required.
- B. L2TP without IPSec provides no encryption and still requires client software, unlike a clientless browser portal.
- D. Site-to-site IPSec connects entire networks together and requires dedicated hardware, not suited to individual contractor access.
Clientless SSL VPN
A remote access method that provides secure, browser-based access to specific internal applications over HTTPS without requiring dedicated VPN client software or full network access.
- Operates at the application layer via a web browser
- Limits exposure by restricting access to specific apps, not the whole network
- Contrasts with IPSec VPNs, which typically grant network-layer access
Memory trick: Clientless SSL = 'just the app, not the whole map'.