Question

A security team wants administrators to reach servers in a highly restricted management VLAN. Direct SSH and RDP from user workstations to these servers is prohibited by policy. Administrators must first authenticate to a single hardened, logged host that then permits access to the restricted devices. Which solution meets this requirement?

Accepted Answer

Deploy a jump box as the single controlled entry point into the management segment

Answer

Configure out-of-band management using a dedicated console server

Answer

Establish a site-to-site VPN between the two buildings

Answer

Enable SNMPv3 polling from the administrator workstations