Which remote access model best reduces attacks from connecting devices?

CDPSE By islever Editorial Last updated

Short answer

C Site-to-site virtual private network (VPN)

Question

Which of the following is the MOST effective remote access model for reducing the likelihood of attacks originating from connecting devices?
  1. Remote wide area network (WAN) links
  2. Thin client remote desktop protocol (RDP)
  3. Site-to-site virtual private network (VPN) Correct Answer
  4. Thick client desktop with virtual private network (VPN) connection

Key Takeaways

The question tests the principle of reducing endpoint attack surface; the trap is confusing network-level security (VPNs) with endpoint-level risk reduction, where thin clients excel.

For the CDPSE exam, the most effective remote access model to reduce attacks originating from connecting devices is thin client RDP, not a site-to-site VPN. Thin clients minimize endpoint attack surface by keeping data and processing on the server, and community discussion supports this security advantage.

Common mistake: Choosing C, Site-to-site VPN, because VPNs are heavily associated with secure remote access. However, a site-to-site VPN only secures network communications and does not protect against attacks originating from compromised connecting devices, unlike a thin client that removes sensitive data and processing from the endpoint.

Expert Analysis

Why the Answer Is Correct

Option B, Thin client remote desktop protocol (RDP), is the most effective model because thin clients drastically reduce the attack surface of connecting devices. Sensitive data and applications remain on the centralized server, so even if a thin client endpoint is compromised, the attacker gains no direct access to stored data and cannot introduce malware into the corporate network through the endpoint. This architecture directly addresses the likelihood of attacks originating from devices themselves by making those devices less valuable and less capable targets.

Why the Other Options Are Wrong

A, Remote WAN links, simply extends the network and offers no endpoint security features, leaving connecting devices fully vulnerable. C, Site-to-site VPN, is a network-level security control that protects data in transit but does not reduce the risk of attacks originating from compromised endpoints on either side of the VPN. D, Thick client desktop with VPN, actually increases endpoint attack surface because the device stores data and runs full applications, even though the VPN secures the communication channel.

Community Comment Notes

The most useful comment [1] correctly explains that thin clients are generally more secure than thick clients because they minimize data and application processing on the endpoint, and compromise impact is limited. The votes showing 100% for C appear inconsistent with this reasoning, and the comment strongly suggests B is the intended answer. Comment [2] merely states C without justification and should be weighed against the architectural reasoning provided in the higher-quality comment.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

When asked about the 'most effective' remote access model to reduce attacks from connecting devices, focus on endpoint attack surface, not just encryption. Thin client and other centralized computing models are almost always correct because they remove data and processing from the remote device, unlike VPN-only solutions.

Community Votes

C
100%

100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. 821bbab 👍 2
    B. Thin client remote desktop protocol (RDP): Thin clients are generally considered more secure than thick clients because they minimize the amount of data and application processing done on the endpoint device. With a thin client, sensitive data and applications remain on the server, reducing the attack surface of the connecting device. If a thin client device is compromised, the impact is limited, as it does not store data locally. This significantly reduces the risk of attacks originating from the endpoint.
  2. shiowbah 👍 1
    D. Thick client desktop with virtual private network (VPN) connection
  3. 4dfe785 👍 1 Answered C
    C. Site-to-site virtual private network (VPN)

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

What Is the Greatest Privacy Concern with a Third-Party Virtualized Workspace?

S-grade

Data Migration with Outdated Documentation: What Should Be Done Next?

S-grade

Which Should Be the First Consideration in Data Sanitization Method Selection?

S-grade

Which scenario poses the greatest privacy risk: lacking hardware disposal policy or unencrypted internal emails?

S-grade

Practice All CDPSE Questions

Access 229 questions with complete answers and detailed explanations.

View Full CDPSE Practice Test →

← Back to CDPSE Study Guide