A large enterprise is deploying a new secure network access solution for its remote workforce. The solution must provide secure connectivity to internal resources, prevent unauthorized access, and ensure that remote devices comply with security policies before granting access. Which secure network access technology is best suited to meet these requirements by establishing an encrypted tunnel and enforcing endpoint posture assessment?
- ARemote Access VPN with SSL/TLS
- BNetwork Access Control (NAC) without VPN
- CSite-to-Site VPN with IPsec
- D802.1X Port-Based Authentication
Show answer & explanationAnswer & explanation
Correct answer: A. Remote Access VPN with SSL/TLS
Remote Access VPN with SSL/TLS (e.g., Cisco Secure Client AnyConnect) provides an encrypted tunnel for remote users and often integrates with endpoint posture assessment capabilities to ensure device compliance before full network access is granted. Site-to-site VPNs are for connecting networks, not individual remote users with posture assessment. NAC without VPN or 802.1X are primarily for on-premise network access control.
Why the other options are wrong
- B. NAC without VPN is for on-premise network access control and does not provide secure remote connectivity or encrypted tunnels.
- C. Site-to-site VPNs connect entire networks, not individual remote users, and typically don't include endpoint posture assessment for individual clients.
- D. 802.1X is for wired or wireless port-based authentication on the local network, not for securing remote access over the internet.
Remote Access VPN (SSL/TLS)
A technology that allows individual remote users to securely connect to a private network over a public network (like the internet) using an encrypted tunnel, often leveraging SSL/TLS protocols.
- Provides secure remote connectivity.
- Often integrates with endpoint posture assessment.
- Commonly implemented with clients like Cisco Secure Client (AnyConnect).
Memory trick: Remote workers need a secure tunnel and a check-up before entering the network.