hardMultiple ChoiceObjective-mapped
220-1202 Practice Question: A company requires that all remote access…
A company requires that all remote access sessions be recorded for compliance purposes. The current VPN solution does not support session recording. Which of the following additional technologies can be integrated to capture and store remote desktop sessions?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement a Remote Desktop Gateway with session recording software
A Remote Desktop Gateway (RD Gateway) can be configured to broker and log RDP sessions, and when combined with a session recording solution, it can capture all activity. VPN alone does not provide session recording, and other methods like VNC or SSH typically lack built-in recording features.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Implement a Remote Desktop Gateway with session recording software
Why this is correct
Implementing a Remote Desktop Gateway provides a secure, single point of entry for remote users to access internal network resources, such as RDP-enabled desktops and applications, without directly exposing those resources to the internet. This gateway can be integrated with third-party session recording software, which captures all user activity during their remote desktop sessions, ensuring comprehensive audit trails and compliance with company policies or regulatory requirements.
- ✗
Use SSH tunneling for all remote access
Why it's wrong here
While SSH tunneling establishes an encrypted connection, primarily used for secure command-line access or port forwarding, it does not inherently offer native capabilities for recording graphical desktop sessions. Although some advanced configurations might log command-line input, it lacks the robust, visual session recording features required for comprehensive compliance monitoring of full desktop interactions, making it unsuitable for the stated company requirement.
- ✗
Configure the VPN to use PPTP instead of L2TP
Why it's wrong here
Configuring a VPN to use PPTP instead of L2TP primarily affects the encryption strength, authentication methods, and overall security posture of the network tunnel, with PPTP being significantly less secure. However, changing the underlying VPN protocol itself does not introduce or enable any session recording functionality for the user's activities once connected. VPNs secure the *connection* but do not typically monitor or record the *content* of the user's desktop session for compliance purposes.
- ✗
Deploy a VNC server on each remote workstation
Why it's wrong here
Deploying a VNC server on each remote workstation allows for basic remote screen sharing and control, enabling users to view and interact with a remote desktop. However, VNC implementations typically lack built-in, robust session recording features necessary for corporate compliance and auditing. Furthermore, managing and securing individual VNC servers across numerous workstations presents significant administrative overhead and potential security vulnerabilities, making it an impractical and insufficient solution for a company-wide requirement.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 220-1202 question from scratch — 495 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.