FirstTry

Objective 3.5

N10-009

Compare and contrast network access and management methods.

Objective 3.5 sits in Network Operations, which carries 19% of the Network+ exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.

Objective title verbatim from the official objectives. CompTIA exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

3-5Network Operations

Five field engineers work from hotels and home offices and each needs access to one internal network. No branch office exists. Which remote access design fits?

A site-to-site VPN from each home routerThat anchors a permanent tunnel at each address, which is a lot of estate to manage for five people.
A clientless portal published to the internetA published portal reaches web applications, not the whole internal network these engineers need.
A point-to-site VPN client on each laptopCorrect · your answerCorrect. Few individual clients is exactly the case this serves.
A jump host reachable over the public internetExposing a host to the internet moves the attack surface outward rather than tunnelling the traffic.

Correct.

Checked against learn.microsoft.com, August 2026

Concept

Remote access designs are chosen by what sits at the far end. A tunnel anchored to a device serves one machine and is started by that machine, while a tunnel anchored to a gateway serves everything behind it and stays up on its own.

Why C

A client-initiated tunnel from each laptop is the documented fit when only a few clients need to reach a network, and it needs no fixed equipment or public address at the user's end.

Source

This solution is useful for telecommuters who want to connect to Azure virtual networks from a remote location, such as from home or a conference. P2S VPN is also a useful solution to use instead of site-to-site (S2S) VPN when you have only a few clients that need to connect to a virtual network.

Microsoft Learn: About point-to-site VPN, checked August 2026
#remote-access#client-to-site-vpn#network-access

Now you: objective 3.5 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

3-5Network Operations

A traveller's hotel network blocks UDP 500 and IP protocol 50, so the IPsec client never establishes. Which tunnel type should the gateway offer instead?

Sample question 2 of 3

3-5Network Operations

A gateway offers both IKEv2 and OpenVPN tunnel types, and identity provider authentication is turned on. Which tunnel type will those users actually connect over?

Sample question 3 of 3

3-5Network Operations

An operations team must open RDP and SSH sessions to servers that carry no public address, with nothing installed on the servers themselves. Which approach does that?

Full Network+ question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Network Operations