mediumMultiple ChoiceObjective-mapped
220-1202 Practice Question: A small business owner wants to allow their…
A small business owner wants to allow their remote employees to securely access a specific internal application without giving them full network access. Which remote access technology should the technician recommend?
⚠ Common exam trap
Test-takers frequently confuse 'remote access' with 'full network connectivity' and choose a VPN (site-to-site or client-based) because they think encryption alone solves the access control problem, overlooking the need for application-specific, least-privilege access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Application gateway
An application gateway (reverse proxy) is the correct choice because it provides granular, application-layer access control, allowing remote employees to reach a specific internal application without granting them full network-level access. Unlike VPNs that create a tunnel to the entire network, an application gateway authenticates and proxies only the designated application traffic, often using protocols like HTTPS and enforcing policies at Layer 7.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Site-to-site VPN
Why it's wrong here
A site-to-site VPN establishes a secure, encrypted tunnel between two distinct networks, such as a main office and a branch office, allowing devices on both networks to communicate as if locally connected. This solution is inappropriate for individual remote users needing access to a single application because it grants broad network access rather than granular, application-specific access, which is an unnecessary security risk and over-provisioning for the stated requirement.
- ✗
Remote Desktop Services
Why it's wrong here
Remote Desktop Services (RDS) provides users with a full graphical desktop environment or specific applications hosted on a central server. While it can deliver applications, RDS typically grants users a complete desktop experience, which is excessive for merely accessing a single application. Furthermore, implementing and managing an RDS infrastructure often involves significant server resources, licensing costs, and administrative overhead, making it a more complex and costly solution than necessary for this specific, limited access need.
- ✓
Application gateway
Why this is correct
An application gateway, often functioning as a reverse proxy, provides secure and controlled access to specific web applications. It sits in front of the application servers, inspecting incoming traffic and forwarding legitimate requests to the appropriate backend application while blocking malicious attempts. This method allows remote users to securely access a single application without exposing the entire internal network or requiring a full VPN connection, aligning perfectly with the need for granular, application-level access.
- ✗
SSH tunneling
Why it's wrong here
SSH tunneling, or port forwarding, creates an encrypted tunnel to forward specific network ports from a client to a server. While it can technically provide access to a single application by forwarding its port, it is generally not user-friendly for non-technical business owners or their employees. It requires manual configuration on the client side for each user and lacks the centralized management, load balancing, and advanced security features (like Web Application Firewall capabilities) that an application gateway offers for web-based applications.
Go deeper
Related to this question
About these practice questions
One of 495 original 220-1202 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.