220-1202 Remote Access Technologies — Timed 15 Questions

Question 1

A small business owner wants to allow a remote employee to access their office desktop from home, but is concerned about security. They currently have a standard router with a public IP. Which of the following is the most secure method to enable this access?

Accepted Answer

Configure a VPN server on the office network and have the employee connect via VPN before using RDP.. Exposing RDP directly to the internet is risky due to brute-force attacks. A VPN creates an encrypted tunnel, authenticating the user before allowing access to the internal network, making it far more secure. This is the recommended best practice.

Answer

Enable port forwarding on the router for TCP 3389 to the desktop's IP address.

Answer

Use a third-party remote desktop service like TeamViewer without additional configuration.

Answer

Change the RDP port to a non-standard port number and enable port forwarding.

Question 2

A technician is setting up remote access for a salesperson who frequently works from coffee shops. The company uses a VPN with two-factor authentication (2FA). The salesperson reports that after entering their username and password, they receive a prompt for a code but do not have their token. What should the technician do to resolve this?

Accepted Answer

Provide the user with a one-time bypass code from the administrator console.. This scenario tests knowledge of 2FA troubleshooting. The user has a token but does not have it available. The correct action is to provide a temporary bypass code, which is a standard feature of 2FA systems for such situations. Disabling 2FA would weaken security, and other options are not appropriate.

Answer

Disable two-factor authentication for the user's account temporarily.

Answer

Instruct the user to reset their password and try again.

Answer

Ask the user to connect from a different network location.

Question 3

A company is implementing a remote access solution for employees using personal smartphones. They need to ensure that corporate email and documents are accessible but that no corporate data remains on the device if it is lost or wiped. Which technology should they use?

Accepted Answer

Mobile Device Management (MDM) with a containerized work profile.. Mobile Device Management (MDM) with a containerized work profile creates a separate, encrypted sandbox on the smartphone that stores corporate email and documents. This container can be remotely wiped by the administrator without affecting the user's personal data, ensuring no corporate data remains on a lost or wiped device.

Answer

Virtual Private Network (VPN) with split tunneling.

Answer

Remote Desktop Protocol (RDP) to a virtual desktop.

Answer

Third-party remote access software like LogMeIn.

Question 4

A user is traveling and needs to access a file on their office computer. They have a dynamic IP address at the hotel. Which remote access technology should the technician recommend for a secure connection?

Accepted Answer

Set up a Virtual Private Network (VPN) client on the user's laptop to connect to the office network.. Option B is correct because a VPN client creates an encrypted tunnel between the user's laptop and the office network, allowing secure access to files regardless of the user's dynamic IP address. VPNs authenticate the user and encrypt all traffic, protecting data over untrusted networks like hotel Wi-Fi.

Answer

Configure a direct RDP connection using the user's home IP address.

Answer

Use a remote desktop gateway that requires a static IP on the user's end.

Answer

Email the file to the user as an attachment.

Question 5

During a remote troubleshooting session, a technician uses a tool that allows them to view the user's screen and control the mouse and keyboard. The user reports that the session is extremely laggy, with noticeable delay between the technician's actions and the screen update. Which of the following is the most likely cause of this lag?

Accepted Answer

The network connection between the technician and the user has high latency or low bandwidth.. The lag described is a classic symptom of network latency or insufficient bandwidth, which directly impacts the responsiveness of remote desktop protocols like RDP or VNC. These protocols transmit screen updates and input events in real time; high latency delays the round-trip of packets, while low bandwidth can cause frame drops or compression artifacts, resulting in the noticeable delay between the technician's actions and the screen update.

Answer

The remote desktop software is using an outdated encryption protocol.

Answer

The user's computer has insufficient RAM to handle remote desktop sessions.

Answer

The technician's computer is running a different operating system than the user's.

Question 6

A security audit reveals that a company's remote access solution uses a VPN with pre-shared keys (PSK) for authentication. The auditor recommends upgrading to certificate-based authentication. Which of the following is the primary security advantage of certificate-based authentication over PSK?

Accepted Answer

Certificates provide mutual authentication and are unique per device, reducing the risk of a single compromised key affecting all users.. Certificate-based authentication provides mutual authentication, meaning both the VPN client and server verify each other's identity using digital certificates issued by a trusted Certificate Authority (CA). Unlike PSK, which is a shared secret that can be leaked and reused across all devices, each certificate is unique per device, so compromise of one certificate does not expose the entire VPN infrastructure. This significantly reduces the blast radius of a security breach and aligns with the principle of least privilege.

Answer

Certificates are easier to configure and manage than PSK.

Answer

Certificates eliminate the need for a VPN server.

Answer

Certificates are faster than PSK for establishing VPN connections.

Question 7

A company uses a Remote Desktop Gateway to allow employees to access internal desktops from the internet. Users report that they can connect to the gateway but cannot see any available desktops in the list. Which of the following is the most likely cause?

Accepted Answer

The users are not members of the correct Active Directory group that is allowed to access specific desktops.. The Remote Desktop Gateway (RD Gateway) acts as a proxy, allowing external RDP connections to internal desktops. When users can connect to the gateway itself but see no desktops, it typically indicates an authorization failure: the RD Gateway uses Resource Authorization Policies (RAPs) to control which desktops a user can access. If the user is not a member of the Active Directory group specified in the RAP, the gateway will deny the list of available desktops, even though the gateway connection succeeds.

Answer

The Remote Desktop Gateway service is not running on the server.

Answer

The desktops are powered off or disconnected from the network.

Answer

The user's RDP client is outdated and cannot display the list.

Question 8

A user reports that they cannot connect to the company's internal file server from home using the provided VPN client. They can access the internet without issues. Which of the following is the most likely cause of this problem?

Accepted Answer

The VPN client is configured for split tunneling, and the file server's IP range is not in the allowed routes.. Split tunneling allows the VPN client to route only specific traffic (e.g., corporate subnets) through the encrypted tunnel, while all other traffic goes directly to the internet. If the file server's IP range is not included in the allowed routes, traffic to that server will bypass the VPN and be sent unencrypted to the user's local gateway, which cannot reach the internal server. This matches the symptom: internet works, but the file server is unreachable.

Answer

The user's home router is blocking VPN traffic on port 443.

Answer

The file server is powered off or experiencing a hardware failure.

Answer

The user's VPN client software is outdated and needs to be reinstalled.

Question 9

A technician is troubleshooting a remote user's inability to connect to the office network via VPN. The user can ping the VPN server's public IP address but the VPN connection fails after entering credentials. The VPN logs show an authentication error. What should the technician check next?

Accepted Answer

Check if the user's account is locked out or if the password has expired.. The VPN logs show an authentication error, which indicates the failure occurs during the credential validation phase, not during network connectivity. Since the user can ping the VPN server's public IP, Layer 3 connectivity is intact, and the issue is likely with the user's account status. Checking if the account is locked out or the password has expired directly addresses the authentication failure.

Answer

Verify that the VPN server's firewall is allowing UDP port 500 and 4500.

Answer

Reinstall the VPN client software on the user's computer.

Answer

Configure the VPN to use a different encryption protocol.

Question 10

A customer calls the help desk saying their remote desktop session to the office workstation keeps disconnecting after a few minutes. They are using a standard RDP client over the internet. What should the technician check first?

Accepted Answer

Review the Remote Desktop Session Host configuration for idle session time limits.. The user's RDP session disconnects after a few minutes, which is a classic symptom of an idle session timeout enforced by the Remote Desktop Session Host (RD Session Host) or Group Policy. By default, Windows Server RDS roles have an idle session limit (often 15 minutes) that disconnects inactive sessions to free resources. Checking this configuration directly addresses the symptom, whereas other options target less likely causes for a consistent, time-based disconnect.

Answer

Verify that the user's local antivirus is not blocking RDP traffic.

Answer

Check the remote workstation's power settings to ensure it is not going to sleep.

Answer

Reinstall the RDP client on the user's home computer.

Question 11

A technician is configuring a VPN for a remote user. The user's home router uses NAT, and the technician wants to ensure the VPN traffic is encapsulated and encrypted. Which VPN protocol should the technician choose for the best balance of security and compatibility?

Accepted Answer

OpenVPN. OpenVPN is the correct choice because it provides a robust balance of security and compatibility, especially for remote users behind NAT. It uses SSL/TLS for encryption and can operate over a single UDP or TCP port (typically 1194), which easily traverses NAT without requiring additional configuration. Unlike L2TP/IPsec, OpenVPN does not rely on IPsec's NAT-sensitive protocols like ESP, making it more reliable across home routers.

Answer

PPTP

Answer

L2TP/IPsec

Answer

SSTP

Question 12

A company is experiencing a security incident where an attacker gained access to the internal network via a compromised VPN account. The technician must prevent future attacks. Which two-factor authentication method should the technician implement for VPN access?

Accepted Answer

Implement a time-based one-time password (TOTP) via an authenticator app. Two-factor authentication (2FA) adds a second factor beyond the password, such as a one-time code from an authenticator app. This significantly reduces the risk of account compromise even if the password is stolen.

Answer

Require a complex password with a minimum length of 20 characters

Answer

Restrict VPN access to specific IP addresses

Answer

Enable single sign-on (SSO) with Active Directory

Question 13

A user working from home reports that they can no longer connect to the company's internal file server using Remote Desktop. They confirm their internet connection is working. Which remote access technology should the technician verify is still active on the user's VPN client?

Accepted Answer

VPN connection. The user's internet connection is working, but they cannot reach the internal file server via Remote Desktop. This indicates the VPN tunnel, which provides encrypted access to the internal network, has likely dropped or is misconfigured. Without an active VPN connection, the user's client cannot route traffic to the private IP range of the file server, even though general internet access is available.

Answer

SSH tunnel

Answer

Remote Desktop Gateway

Answer

VNC server

Question 14

A small business owner wants to allow their remote employees to securely access a specific internal application without giving them full network access. Which remote access technology should the technician recommend?

Accepted Answer

Application gateway. An application gateway (reverse proxy) is the correct choice because it provides granular, application-layer access control, allowing remote employees to reach a specific internal application without granting them full network-level access. Unlike VPNs that create a tunnel to the entire network, an application gateway authenticates and proxies only the designated application traffic, often using protocols like HTTPS and enforcing policies at Layer 7.

Answer

Site-to-site VPN

Answer

Remote Desktop Services

Answer

SSH tunneling

Question 15

A technician is configuring a remote desktop solution for a user who needs to access a Linux server from a Windows 10 workstation. The technician wants to use a secure, encrypted connection. Which remote access technology should the technician configure on the Linux server?

Accepted Answer

SSH. SSH (Secure Shell) is the correct choice because it provides encrypted, authenticated remote shell access to Linux/Unix servers over an insecure network. It uses TCP port 22 and supports strong encryption algorithms (e.g., AES, ChaCha20) and public-key authentication, making it the standard secure remote access protocol for Linux systems.

Answer

RDP

Answer

VNC

Answer

Telnet