Hybrid municipal staff need to reach internal desktops from home. Which remote workforce access pattern is appropriate?
Select an answer to reveal the explanation.
Short Explanation
Parking RDP on the open Internet is like leaving City Hall’s side door unlocked with the key under the mat. Give hybrid staff a VPN or zero-trust broker plus MFA so identity is checked before the desktop appears. Port-forwards without a broker and “just use USB sticks” either blast the attack surface or invent a worse data path.
Full Explanation
Workforce remote access should terminate on a controlled VPN or zero-trust network access broker that enforces strong authentication, typically including MFA, before granting application or desktop reachability. Direct Internet exposure of RDP and unmanaged port-forwarding are routinely exploited and lack brokered policy enforcement. Completely removing remote access while relying on removable media introduces alternative loss and malware pathways and fails operational needs. Secure remote-access patterns balance usability with encrypted, authenticated channels.