220-1202 Remote Access Technologies — 10 Questions

Question 1

A small business owner wants to allow a remote employee to access their office desktop from home, but is concerned about security. They currently have a standard router with a public IP. Which of the following is the most secure method to enable this access?

Accepted Answer

Configure a VPN server on the office network and have the employee connect via VPN before using RDP.. Exposing RDP directly to the internet is risky due to brute-force attacks. A VPN creates an encrypted tunnel, authenticating the user before allowing access to the internal network, making it far more secure. This is the recommended best practice.

Answer

Enable port forwarding on the router for TCP 3389 to the desktop's IP address.

Answer

Use a third-party remote desktop service like TeamViewer without additional configuration.

Answer

Change the RDP port to a non-standard port number and enable port forwarding.

Question 2

A technician is setting up remote access for a salesperson who frequently works from coffee shops. The company uses a VPN with two-factor authentication (2FA). The salesperson reports that after entering their username and password, they receive a prompt for a code but do not have their token. What should the technician do to resolve this?

Accepted Answer

Provide the user with a one-time bypass code from the administrator console.. This scenario tests knowledge of 2FA troubleshooting. The user has a token but does not have it available. The correct action is to provide a temporary bypass code, which is a standard feature of 2FA systems for such situations. Disabling 2FA would weaken security, and other options are not appropriate.

Answer

Disable two-factor authentication for the user's account temporarily.

Answer

Instruct the user to reset their password and try again.

Answer

Ask the user to connect from a different network location.

Question 3

A company is implementing a remote access solution for employees using personal smartphones. They need to ensure that corporate email and documents are accessible but that no corporate data remains on the device if it is lost or wiped. Which technology should they use?

Accepted Answer

Mobile Device Management (MDM) with a containerized work profile.. Mobile Device Management (MDM) with a containerized work profile creates a separate, encrypted sandbox on the smartphone that stores corporate email and documents. This container can be remotely wiped by the administrator without affecting the user's personal data, ensuring no corporate data remains on a lost or wiped device.

Answer

Virtual Private Network (VPN) with split tunneling.

Answer

Remote Desktop Protocol (RDP) to a virtual desktop.

Answer

Third-party remote access software like LogMeIn.

Question 4

A user is traveling and needs to access a file on their office computer. They have a dynamic IP address at the hotel. Which remote access technology should the technician recommend for a secure connection?

Accepted Answer

Set up a Virtual Private Network (VPN) client on the user's laptop to connect to the office network.. Option B is correct because a VPN client creates an encrypted tunnel between the user's laptop and the office network, allowing secure access to files regardless of the user's dynamic IP address. VPNs authenticate the user and encrypt all traffic, protecting data over untrusted networks like hotel Wi-Fi.

Answer

Configure a direct RDP connection using the user's home IP address.

Answer

Use a remote desktop gateway that requires a static IP on the user's end.

Answer

Email the file to the user as an attachment.

Question 5

During a remote troubleshooting session, a technician uses a tool that allows them to view the user's screen and control the mouse and keyboard. The user reports that the session is extremely laggy, with noticeable delay between the technician's actions and the screen update. Which of the following is the most likely cause of this lag?

Accepted Answer

The network connection between the technician and the user has high latency or low bandwidth.. The lag described is a classic symptom of network latency or insufficient bandwidth, which directly impacts the responsiveness of remote desktop protocols like RDP or VNC. These protocols transmit screen updates and input events in real time; high latency delays the round-trip of packets, while low bandwidth can cause frame drops or compression artifacts, resulting in the noticeable delay between the technician's actions and the screen update.

Answer

The remote desktop software is using an outdated encryption protocol.

Answer

The user's computer has insufficient RAM to handle remote desktop sessions.

Answer

The technician's computer is running a different operating system than the user's.

Question 6

A security audit reveals that a company's remote access solution uses a VPN with pre-shared keys (PSK) for authentication. The auditor recommends upgrading to certificate-based authentication. Which of the following is the primary security advantage of certificate-based authentication over PSK?

Accepted Answer

Certificates provide mutual authentication and are unique per device, reducing the risk of a single compromised key affecting all users.. Certificate-based authentication provides mutual authentication, meaning both the VPN client and server verify each other's identity using digital certificates issued by a trusted Certificate Authority (CA). Unlike PSK, which is a shared secret that can be leaked and reused across all devices, each certificate is unique per device, so compromise of one certificate does not expose the entire VPN infrastructure. This significantly reduces the blast radius of a security breach and aligns with the principle of least privilege.

Answer

Certificates are easier to configure and manage than PSK.

Answer

Certificates eliminate the need for a VPN server.

Answer

Certificates are faster than PSK for establishing VPN connections.

Question 7

A company uses a Remote Desktop Gateway to allow employees to access internal desktops from the internet. Users report that they can connect to the gateway but cannot see any available desktops in the list. Which of the following is the most likely cause?

Accepted Answer

The users are not members of the correct Active Directory group that is allowed to access specific desktops.. The Remote Desktop Gateway (RD Gateway) acts as a proxy, allowing external RDP connections to internal desktops. When users can connect to the gateway itself but see no desktops, it typically indicates an authorization failure: the RD Gateway uses Resource Authorization Policies (RAPs) to control which desktops a user can access. If the user is not a member of the Active Directory group specified in the RAP, the gateway will deny the list of available desktops, even though the gateway connection succeeds.

Answer

The Remote Desktop Gateway service is not running on the server.

Answer

The desktops are powered off or disconnected from the network.

Answer

The user's RDP client is outdated and cannot display the list.

Question 8

A user reports that they cannot connect to the company's internal file server from home using the provided VPN client. They can access the internet without issues. Which of the following is the most likely cause of this problem?

Accepted Answer

The VPN client is configured for split tunneling, and the file server's IP range is not in the allowed routes.. Split tunneling allows the VPN client to route only specific traffic (e.g., corporate subnets) through the encrypted tunnel, while all other traffic goes directly to the internet. If the file server's IP range is not included in the allowed routes, traffic to that server will bypass the VPN and be sent unencrypted to the user's local gateway, which cannot reach the internal server. This matches the symptom: internet works, but the file server is unreachable.

Answer

The user's home router is blocking VPN traffic on port 443.

Answer

The file server is powered off or experiencing a hardware failure.

Answer

The user's VPN client software is outdated and needs to be reinstalled.

Question 9

A technician is troubleshooting a remote user's inability to connect to the office network via VPN. The user can ping the VPN server's public IP address but the VPN connection fails after entering credentials. The VPN logs show an authentication error. What should the technician check next?

Accepted Answer

Check if the user's account is locked out or if the password has expired.. The VPN logs show an authentication error, which indicates the failure occurs during the credential validation phase, not during network connectivity. Since the user can ping the VPN server's public IP, Layer 3 connectivity is intact, and the issue is likely with the user's account status. Checking if the account is locked out or the password has expired directly addresses the authentication failure.

Answer

Verify that the VPN server's firewall is allowing UDP port 500 and 4500.

Answer

Reinstall the VPN client software on the user's computer.

Answer

Configure the VPN to use a different encryption protocol.

Question 10

A customer calls the help desk saying their remote desktop session to the office workstation keeps disconnecting after a few minutes. They are using a standard RDP client over the internet. What should the technician check first?

Accepted Answer

Review the Remote Desktop Session Host configuration for idle session time limits.. The user's RDP session disconnects after a few minutes, which is a classic symptom of an idle session timeout enforced by the Remote Desktop Session Host (RD Session Host) or Group Policy. By default, Windows Server RDS roles have an idle session limit (often 15 minutes) that disconnects inactive sessions to free resources. Checking this configuration directly addresses the symptom, whereas other options target less likely causes for a consistent, time-based disconnect.

Answer

Verify that the user's local antivirus is not blocking RDP traffic.

Answer

Check the remote workstation's power settings to ensure it is not going to sleep.

Answer

Reinstall the RDP client on the user's home computer.