SSCP Network and Communications Security Practice Question
A security auditor is reviewing the configuration of a remote access VPN. Which TWO features are considered best practices for securing the VPN connection?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implementing multi-factor authentication (MFA)
Multi-factor authentication (MFA) adds an extra layer of security beyond passwords, reducing the risk of unauthorized access. TLS 1.3 with mandatory forward secrecy ensures that session keys are not compromised even if the server's private key is later exposed, providing strong encryption. Both are established best practices for securing remote access VPNs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Using IKEv2 with pre-shared keys only
Why it's wrong here
PSK is less secure than certificate-based authentication.
- ✗
Disabling encryption to reduce latency
Why it's wrong here
Disabling encryption defeats the purpose of a VPN.
- ✓
Implementing multi-factor authentication (MFA)
Why this is correct
MFA adds an extra layer of security beyond passwords.
- ✗
Enabling split tunneling for all traffic to improve performance
Why it's wrong here
Full split tunneling can expose the corporate network if the client is compromised.
- ✓
Using TLS 1.3 with mandatory forward secrecy
Why this is correct
TLS 1.3 provides strong encryption and forward secrecy.
Go deeper
Related to this question
About these practice questions
One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.