SSCP Network and Communications Security Practice Question
A company needs to provide secure remote access for employees working from home. The security team wants to ensure the solution provides strong authentication and encryption, and supports a wide range of client devices without requiring proprietary software. Which technology should they implement?
⚠ Common exam trap
The trap here is assuming that any encrypted remote access method, such as SSH or RDP, provides the same level of network access and security as a full VPN solution.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
IPsec VPN with IKEv2
IKEv2 is a modern VPN protocol that offers strong security and is widely supported across devices without proprietary clients. It supports various authentication methods and is efficient in reconnecting after network changes, making it ideal for mobile workers. The other options are either not full VPN solutions or are limited in scope. Therefore, IKEv2 IPsec VPN is the correct choice.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Secure Shell (SSH) tunneling
Why it's wrong here
SSH tunneling can provide secure remote access, but it is primarily used for command-line access and port forwarding, not for full network connectivity. It requires users to have SSH clients and may not be as seamless for non-technical users. It also lacks built-in support for full network routing and can be complex to set up for multiple services. Thus, it is not the best fit for broad employee remote access.
- ✗
Remote Desktop Protocol (RDP) with TLS
Why it's wrong here
RDP with TLS provides encryption for remote desktop sessions, but it is not a VPN solution. It allows access to a specific machine, not the entire network, and requires that the RDP service be exposed to the internet, increasing attack surface. It also does not provide strong authentication by itself and is often targeted by attackers. Therefore, it does not meet the need for secure remote access to network resources.
- ✓
IPsec VPN with IKEv2
Why this is correct
IKEv2 is a robust VPN protocol that supports strong encryption and authentication, and is widely supported on many devices including mobile platforms. It can be used with various authentication methods such as certificates, EAP, and pre-shared keys. It does not require proprietary software, as it is built into most modern operating systems. Therefore, it meets the requirements for secure remote access with broad compatibility.
- ✗
File Transfer Protocol Secure (FTPS)
Why it's wrong here
FTPS is used for secure file transfers, not for general remote access. It encrypts data in transit but does not provide a tunnel for network traffic or support interactive sessions. It is limited to file transfer operations and cannot be used to access internal applications or services. Thus, it is not suitable for providing remote employees with secure access to the corporate network.
Quick reference
VPN Protocol Comparison
| Protocol | Port | Encryption | Authentication | Use Case |
|---|---|---|---|---|
| IKEv2 / IPsec | UDP 500 / 4500 | AES-256 | Certificates / PSK | Site-to-site & remote access |
| SSL / TLS VPN | TCP 443 | TLS 1.3 | Certificates / MFA | Clientless remote access |
| L2TP / IPsec | UDP 1701 | AES (IPsec) | PSK / Certificates | Legacy remote access |
| WireGuard | UDP 51820 | ChaCha20 | Public keys | Modern high-performance VPN |
| PPTP | TCP 1723 | MPPE (weak) | MS-CHAPv2 | Legacy — avoid in production |
PPTP is considered insecure. IKEv2/IPsec and SSL VPN are the current recommended options.
Go deeper
Related to this question
About these practice questions
One of 971 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.