SSCP Systems Security Certified PractitionerNetwork and Communications SecurityHard
A system administrator needs to secure remote access to internal servers for external contractors. The solution must provide strong encryption for data in transit and allow granular control over which internal resources each contractor can access. Which of the following solutions best meets these requirements?
- ASetting up SSH port forwarding for each server.
- BConfiguring a Remote Desktop Protocol (RDP) gateway.
- CDeploying a client-to-site VPN with a RADIUS server.
- DImplementing a site-to-site VPN.
Show answer & explanationAnswer & explanation
Correct answer: C. Deploying a client-to-site VPN with a RADIUS server.
A client-to-site VPN establishes a secure, encrypted tunnel from an individual contractor's device to the internal network, providing strong encryption. Integrating it with a RADIUS server allows for centralized authentication and granular authorization, controlling access to specific internal resources based on the contractor's role.
Why the other options are wrong
- A. SSH port forwarding secures a single connection to a specific port/server but is not a scalable or manageable solution for multiple contractors needing access to various internal resources with granular control.
- B. An RDP gateway provides remote desktop access but might not offer the same level of granular network-wide resource control or encryption strength as a VPN.
- D. A site-to-site VPN connects two entire networks, not individual remote users, and doesn't inherently provide granular per-user access control to internal resources.
Client-to-Site VPN with RADIUS
A remote access solution that creates an encrypted tunnel from a single user's device to the corporate network, leveraging a RADIUS server for centralized authentication and granular authorization.
- Provides strong encryption for data in transit.
- Enables remote users to securely access internal resources.
- RADIUS integration allows for centralized user management and granular access control.
Memory trick: Remote Access Needs Strong Control.