Remote Access and Connections CSE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company uses a remote-access VPN for employees. The security team wants to enforce that only users who have completed security training can access the VPN, and that all VPN access is logged. Which IAM approach should be used?

   • AUse individual policies for each user and disable logging to reduce overhead.
   • BGrant VPN access to all users and rely on the VPN's built-in logging.
   • CCreate a user group for trained employees, assign the VPN access policy to that group, and enable logging on the VPN.
   • DCreate a policy that allows VPN access only during business hours.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which protocol is commonly used to secure a remote access VPN connection through a web browser?

   • ASSH
   • BIPsec
   • CSSL/TLS
   • DRDP
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company requires that all administrative access to cloud resources use multi-factor authentication and that each admin has a unique account. Which practice is the most aligned with this requirement?

   • ADisable MFA for admins who use a VPN.
   • BUse a service principal for all admin tasks.
   • CShare a single admin account with MFA enabled.
   • DEnforce MFA on all admin accounts and use individual accounts for each admin.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which combination of controls is essential for securing remote access to a cloud VM?

   • AAuthentication, encryption, and access controls
   • BAccess controls, encryption, and open firewall rules
   • CEncryption, monitoring, and public IP
   • DPublic IP, open ports, and default credentials
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   An organization allows remote employees to access internal applications via a VPN. The security team wants to enforce that only users with a specific job role can access the finance application, and that all remote access requires a second authentication factor. Which configuration should be implemented?

   • ACreate an IAM role for finance users, attach a policy that allows access to the finance app, and enable MFA on the VPN.
   • BGrant all VPN users access to all applications and enable MFA.
   • CUse a shared VPN account for the finance team and require a complex password.
   • DConfigure the VPN to allow access only from corporate-owned devices, without MFA.
   Reveal Solution Discussion Select an answer first