What is a VPN and what security considerations apply?

• A. A secure encrypted tunnel for remote access; consider strong authentication, encryption strength, split-tunneling policy, logging, and patching
• B. A public internet service with no security features
• C. A local area network without encryption
• D. A service that replaces firewalls entirely

Answer: (A)

A VPN creates a secure encrypted tunnel over a public network to connect users or sites remotely. It protects data in transit by encrypting the traffic, provides a way to verify who is connecting, and can enforce access controls so only authorized devices and users can reach internal resources.

Security considerations include using strong authentication (ideally multi-factor) to prevent credential compromise, selecting robust encryption strength and up-to-date protocols to protect confidentiality and integrity, deciding on split-tunneling policies to control whether only VPN traffic or all traffic passes through the tunnel, implementing thorough logging and monitoring to detect unusual or unauthorized access, and keeping VPN software and endpoints patched and hardened to mitigate vulnerabilities.

Other descriptions don’t fit because they imply no security at all, or simply describe a local network without encryption, or suggest a function that replaces firewalls entirely.