ISC2 Certified in Cybersecurity (CC)Network SecurityHard
A company requires all employees to use their corporate laptops for work, even when traveling. The security policy states that these laptops must always be connected to the corporate network securely, regardless of their physical location or the underlying internet connection. Which technology ensures continuous, secure communication back to the corporate network without requiring manual user initiation for every session?
- AAlways-On VPN
- BSplit Tunnel VPN
- CClientless VPN
- DSite-to-Site VPN
Show answer & explanationAnswer & explanation
Correct answer: A. Always-On VPN
An Always-On VPN automatically establishes and maintains a secure VPN connection whenever the device has internet access, ensuring continuous secure communication without user intervention.
Why the other options are wrong
- B. Split Tunnel VPN routes only corporate traffic through the VPN, allowing other traffic to go directly to the internet, but doesn't guarantee 'always-on' connectivity.
- C. Clientless VPNs (often SSL VPNs) are accessed via a web browser and require manual initiation for each session, not continuous connection.
- D. Site-to-Site VPNs connect entire networks (e.g., branch office to headquarters), not individual mobile devices.
Always-On VPN
A type of Virtual Private Network that automatically establishes and maintains a secure connection to a corporate network whenever the device has internet connectivity, without requiring manual user initiation.
- Ensures continuous security and policy enforcement for remote devices.
- Enhances compliance and reduces security risks for mobile users.
- Can be configured to enforce full tunnel or split tunnel depending on policy.
Memory trick: Always-On Auto-Connects, Split Tunnels Separate, Site-to-Site Joins Offices, Clientless Browses.