Which of the following is a technical control to support secure teleworker access to the corporate network?

• A. Install and configure a VPN appliance
• B. Conduct annual security awareness training
• C. Implement a formal change management policy
• D. Physically secure office buildings

Answer: (A)

Providing secure remote access relies on a technical control that directly protects the network connection. A VPN appliance creates an encrypted tunnel between the teleworker’s device and the corporate network, authenticates users, and enforces access controls, so data in transit remains confidential and intact even over untrusted networks. This is a technical mechanism that directly secures how traffic enters the network from remote locations.

Other options are important but not technical controls that secure the connection itself. Security awareness training is an administrative measure aimed at changing user behavior, not the network traffic itself. A formal change management policy governs how changes are requested and approved, not how access is secured. Physically securing office buildings is a physical control focused on protecting physical assets, not remote network access.