Proxy Servers, VPNs, and Secure Network Communication NDE Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A company with headquarters and three regional offices wants to allow employees in any office to access resources in all other offices as if they were on the same LAN. They also want to support a small number of teleworkers. Which VPN architecture should they implement?

   • ASite-to-site VPNs between all offices, plus a remote-access VPN for teleworkers
   • BA forward proxy with VPN passthrough
   • COnly remote-access VPNs for all employees
   • DA single site-to-site VPN from headquarters to one regional office
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A company is migrating from a legacy PPTP VPN to a modern solution. The requirements are: support for strong encryption, compatibility with existing Active Directory authentication, and the ability to use the same VPN for both remote-access and site-to-site connections. Which protocol best satisfies all requirements?

   • AWireGuard with LDAP integration
   • BSSL/TLS VPN portal
   • CPPTP with MS-CHAPv2
   • DIPsec with IKEv2 and certificate or EAP authentication
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A security auditor finds that the company's VPN gateway uses a single shared pre-shared key for all remote users and that the key has not been rotated in two years. The auditor also notes that the VPN logs show multiple failed authentication attempts from unknown IPs. What is the most critical immediate action?

   • AAdd more failed-attempt logging
   • BRotate the pre-shared key immediately and implement per-user certificates
   • CDisable VPN access until the audit is complete
   • DIncrease the key length and keep the same key
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   A salesperson needs to securely access the company's internal applications while traveling. Which type of VPN is most appropriate?

   • ARemote-access VPN
   • BSite-to-site VPN
   • CIntranet VPN
   • DExtranet VPN
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which practice is recommended when configuring a proxy server to maintain security?

   • ADisable logging to protect user privacy
   • BPlace the proxy outside the firewall to avoid internal network exposure
   • CUse strong authentication for administrative access
   • DAllow all traffic by default to avoid blocking legitimate users
   Reveal Solution Discussion Select an answer first