CISA Certified Information Systems Auditor – Question1107

Which of the following is the GREATEST security threat when an organization allows remote access to a virtual private network (VPN)?

A.
Client logins are subject to replay attack.
B. VPN traffic could be sniffed and captured.
C. Compromised VPN clients could impact the network.
D. Attackers could compromise the VPN gateway.

Correct Answer: C