A security engineer has been asked to reduce the attack surface on an organization’s production environment. To limit access, direct VPN access to all systems must be terminated, and users must utilize multifactor authentication to access a constrained VPN connection and then pivot to other production systems form a bastion host. The MOST appropriate way to implement the stated requirement is through the use of a:
A. sinkhole.
B. multitenant platform.
C. single-tenant platform.
D. jump box