A contractor at an agency may use only a browser to reach one published application and must not install a VPN client. Which access method fits?
Select an answer to reveal the explanation.
Short Explanation
The visitor is allowed one window in a browser and is not allowed to install a tunnel tool. You publish that application through a clientless VPN. A building-to-building tunnel, a full client that captures every packet, and a serial console are different doors, and two of them demand software the contractor must not install.
Full Explanation
A clientless VPN lets a user reach selected applications through a browser without installing a VPN client. The contractor is limited to a browser and to one published application, so clientless access matches both constraints. A site-to-site VPN connects two networks through their gateways. It does not install a client on a laptop, and it is not how you publish one application to one contractor. A full-tunnel client VPN does require client software, and it sends the laptop's traffic through the tunnel. The distractor reverses that requirement. Out-of-band console access is a management path to a device, often serial, used when the production network is down. It does not publish an application in a browser. Exam caveat: clientless access is only as broad as the applications you publish. It is not a substitute for full network access to every subnet. Operational check: sign in from a browser on a clean laptop, open the one published application, and confirm no tunnel client was required.