200-901 Question 201
Select 2A company wants to securely access an internal web application hosted on their private network from an external location. They are considering using either a proxy or a VPN. Which solution(s) would securely allow access while minimizing exposure to the internal network?
- A
Use a proxy server configured to forward specific traffic to the internal web application
- B
Set up a VPN tunnel to provide complete access to the internal network
- C
Use a reverse proxy with access control policies to route requests to the internal web application
- D
Implement a VPN connection limited to the specific port and IP address of the internal web application
- E
Expose the internal web application directly to the internet with a public IP address
Show answer and explanation
Correct answers: A, C
Explanation
To securely access an internal web application from an external location, a proxy or reverse proxy with proper configurations can route traffic securely without exposing the entire network. While a VPN can provide secure access, giving complete or even limited VPN access increases the attack surface. Exposing the application directly to the internet is highly insecure and should be avoided.
- A. Correct.
A proxy server configured to forward specific traffic can securely route requests to the internal web application without exposing the entire private network. However, it requires careful configuration to ensure security.
- B. Incorrect.
Setting up a VPN tunnel provides complete access to the internal network, which increases the attack surface and may expose other unintended resources.
- C. Correct.
A reverse proxy with access control policies is a secure solution that allows traffic to be routed specifically to the internal web application while enforcing security rules.
- D. Incorrect.
Implementing a VPN connection limited to the specific port and IP address of the internal web application is technically possible, but it requires complex configuration and may still expose some parts of the network unnecessarily.
- E. Incorrect.
Exposing the internal web application directly to the internet with a public IP address is highly insecure and not recommended, as it bypasses all security mechanisms.