Virtual Private Network (VPN)

Correct Answer: SSL VPN

SSL VPN is the best answer for allowing mobile devices to securely access a company's internal resources. SSL VPNs use the SSL/TLS protocol to provide secure remote access through a web browser, making them well-suited for mobile devices. IPsec VPNs are more commonly used for site-to-site connections between networks. Site-to-Site VPNs are used to connect two or more networks together, not for individual client access. DirectAccess is a Microsoft technology that allows Windows clients to connect to internal resources without a traditional VPN, but it is not widely supported on mobile devices.

Correct Answer: Encryption

Encryption is the correct answer because it is the VPN feature that protects sensitive data from unauthorized access while being transmitted across the network. Encryption scrambles the data so that it is unreadable to anyone who intercepts it without the proper decryption key. Anonymity hides the identity of the user but does not protect the data itself. TCP optimization improves network performance but does not provide security. Authentication verifies the identity of the user but does not protect the data in transit.

Correct Answer: Multifactor authentication

Multifactor authentication provides the best security for a temporary VPN setup for vendors needing access to specific internal resources. Multifactor authentication requires users to provide two or more forms of identification, such as a password and a one-time code sent to their mobile device, before granting access. This adds an extra layer of security compared to single-factor authentication methods like using only a username and password or shared secret keys, which can be more easily compromised. By requiring multiple forms of authentication, the organization can ensure that only authorized vendors can access the internal resources through the temporary VPN.