FirstTry
Objective 3.5N10-009

3.5 Compare and contrast network access and management methods.

Objective 3.5 sits in Network Operations, which carries 19% of the Network+ exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.

Objective title verbatim from the official objectives. CompTIA exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

3-5Network OperationsModerate

Five field engineers work from hotels and home offices and each needs access to one internal network. No branch office exists. Which remote access design fits?

A site-to-site VPN from each home routerThat anchors a permanent tunnel at each address, which is a lot of estate to manage for five people.
A point-to-site VPN client on each laptopCorrect · your answerCorrect. Few individual clients is exactly the case this serves.
A clientless portal published to the internetA published portal reaches web applications, not the whole internal network these engineers need.
A jump host reachable over the public internetExposing a host to the internet moves the attack surface outward rather than tunnelling the traffic.

Correct.

Concept

Remote access designs are chosen by what sits at the far end. A tunnel anchored to a device serves one machine and is started by that machine, while a tunnel anchored to a gateway serves everything behind it and stays up on its own.

Why B

A client-initiated tunnel from each laptop is the documented fit when only a few clients need to reach a network, and it needs no fixed equipment or public address at the user's end.

Source

#remote-access#client-to-site-vpn#network-access

Now you: objective 3.5 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

3-5Network OperationsHard

A traveller's hotel network blocks UDP 500 and IP protocol 50, so the IPsec client never establishes. Which tunnel type should the gateway offer instead?

Sample question 2 of 3

3-5Network OperationsModerate

A gateway offers both IKEv2 and OpenVPN tunnel types, and identity provider authentication is turned on. Which tunnel type will those users actually connect over?

Sample question 3 of 3

3-5Network OperationsModerate

An operations team must open RDP and SSH sessions to servers that carry no public address, with nothing installed on the servers themselves. Which approach does that?

Full Network+ question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Network Operations