How Should a Security Consultant Securely Access a Client Environment Remotely?
A security consultant needs secure, remote access to a client environment. Which of the following should the security consultant most likely use to gain access?
Community Votes
100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The question tests the distinction between authentication protocols and full-stack secure tunneling solutions, where candidates often confuse credential verification with actual data encryption.
This question assesses knowledge of secure remote access mechanisms, with the community unanimously selecting IPSec as the standard for encrypted, authenticated connections over untrusted networks. IPSec guarantees data confidentiality, integrity, and authenticity throughout the consultation session.
Candidates frequently choose EAP, assuming that because it handles strong authentication, it also secures the entire connection. In reality, EAP is merely an authentication framework that operates at the link layer and does not encrypt traffic or create a secure remote access tunnel.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Core Concept
The scenario requires a technology that provides secure remote access across potentially untrusted networks. For a security consultant accessing a client environment, the solution must establish an encrypted tunnel that protects data in transit while verifying identities.Why IPSec is Correct
IPSec (Internet Protocol Security) operates at the network layer and provides robust security services including confidentiality, integrity, and authenticity. It is widely deployed for site-to-site and remote-access VPNs, making it the industry-standard choice for consultants needing encrypted, authenticated connections to corporate networks. As noted by the community, IPSec ensures that all transmitted data remains protected from interception or tampering.Why Other Options Are Incorrect
- EAP (Extensible Authentication Protocol): Handles only the authentication phase (e.g., password or certificate verification) and does not provide encryption or tunneling capabilities on its own.
- DHCP (Dynamic Host Configuration Protocol): Automatically assigns IP addresses and network parameters; it has zero security or encryption functions.
- NAT (Network Address Translation): Maps private IP addresses to public ones for routing purposes and actually obscures rather than secures traffic, making it unsuitable for remote access requirements.
Community Consensus
The community votes align perfectly with official guidance, emphasizing that IPSec is the foundational protocol for secure remote connectivity. Multiple users correctly broke down each acronym to eliminate distractors, reinforcing that only IPSec delivers a complete secure transport layer.Official Reference
- https://www.rfc-editor.org/rfc/rfc4301
- https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-113.pdf
- CompTIA Security+ SY0-701 Certification Guide: Chapter on Network Security & VPN Technologies
Exam Strategy
When evaluating remote access questions, immediately filter out protocols that only manage addressing or authentication phases. Prioritize solutions that explicitly mention encryption, tunneling, or end-to-end data protection, as these directly satisfy secure connectivity requirements.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →