ISC Infrastructure And System Security Practice Question
Which THREE of the following items should be addressed when designing a secure remote access architecture for a hybrid cloud environment using a VPN gateway?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AES-256 encryption for the IKE/IPsec tunnel
A secure design requires robust authentication (MFA), transport security (encryption), and granular authorization (least privilege).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Public IP address assignment for all internal nodes
Why it's wrong here
Exposing internal nodes via public IPs is a major security risk and should be avoided.
- ✓
AES-256 encryption for the IKE/IPsec tunnel
Why this is correct
Strong encryption is required to protect the confidentiality of the transit traffic.
- ✓
Multi-Factor Authentication (MFA) integration
Why this is correct
MFA is mandatory for verifying the identity of remote users accessing the corporate network.
- ✓
Role-Based Access Control (RBAC) at the gateway
Why this is correct
RBAC ensures that users are restricted to the specific segments they require access to.
- ✗
Disabling logging to reduce overhead
Why it's wrong here
Disabling logging prevents the security team from detecting and responding to incidents.
About these practice questions
One of 208 original ISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official (ISC)² exam blueprint
This ISC practice question is part of Courseiva's free (ISC)² certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ISC exam.