CompTIA CySA+ (CS0-001) — Question 271

Joe, an analyst, has received notice that a vendor who is coming in for a presentation will require access to a server outside the network. Currently, users are only able to access remote sites through a VPN connection. Which of the following should Joe use to BEST accommodate the vendor?

Answer options

• A. Allow incoming IPSec traffic into the vendor's IP address.
• B. Set up a VPN account for the vendor, allowing access to the remote site.
• C. Turn off the firewall while the vendor is in the office, allowing access to the remote site.
• D. Write a firewall rule to allow the vendor to have access to the remote site.

Correct answer: B

Explanation

The correct answer is B because creating a VPN account for the vendor ensures secure access to the remote site while maintaining network security. Option A is incorrect as simply allowing IPSec traffic does not provide a secure method for access. Option C is not advisable since turning off the firewall poses a significant security risk. Option D, while it provides access, does not ensure the secure connection that a VPN offers.