220-1102 Question 26
Single answerNetworkA technician is configuring a small office laptop for a user who needs secure remote access to internal file shares while traveling. The user will often connect from hotel and airport Wi-Fi networks. The company wants to reduce the risk of eavesdropping on untrusted networks and ensure the laptop can reach internal resources as if it were on the office network. Which solution should the technician implement?
- A
Configure a VPN client on the laptop and require the user to connect to the company's VPN before accessing internal resources
- B
Enable Network Discovery and File and Printer Sharing on the laptop for all network profiles
- C
Assign a static IP address on the laptop that matches the company's internal subnet
- D
Map the internal file share using its private IP address so the laptop can reach it directly from public Wi-Fi
Show answer and explanation
Correct answer: A
Explanation
The best answer is to use a VPN client. In a real-world support scenario, remote users on public Wi-Fi need encrypted communication and a secure method to access internal resources. A VPN addresses both needs by creating a protected tunnel to the organization's network. This aligns with standard security best practices such as using encrypted remote access over untrusted networks and avoiding direct exposure of internal file-sharing services to the internet. It also reflects common enterprise implementations documented by operating system vendors and security guidance, where VPNs are used to securely extend private network access to remote endpoints.
- A. Correct.
Correct. A VPN creates an encrypted tunnel over untrusted networks such as hotel or airport Wi-Fi and allows the remote laptop to securely access internal corporate resources. This is the standard best-practice solution for secure remote access because it provides confidentiality in transit and logical access to internal network services.
- B. Incorrect.
Incorrect. Enabling Network Discovery and File and Printer Sharing does not provide secure access to company resources over the internet. In fact, enabling these features on public networks can increase risk by exposing the system to other devices on the same network. This choice reflects a common misconception that local sharing settings help with remote connectivity.
- C. Incorrect.
Incorrect. Assigning a static IP address from the company's internal subnet on a laptop connected to public Wi-Fi will not provide access to the internal network. IP addressing must match the connected network's routing environment, and a private internal address is not routable across the internet by itself. This confuses local addressing with secure remote connectivity.
- D. Incorrect.
Incorrect. Mapping a share by private IP address does not make that resource reachable from the public internet. Private IP ranges are not internet-routable, and the user would still need a secure path into the company's internal network. This distractor targets the misconception that knowing the server's IP is sufficient for remote access.