Virtual Private Networks (VPN)
Key Takeaways
Subdomain 4.1 names the Virtual Private Network (VPN) as a network security concept.
A VPN carries traffic over an encrypted tunnel across an untrusted network.
A VPN protects the connection, not the endpoint, so the device still needs its own controls.
Source: ISC2 CC Exam Outline effective September 1, 2026, subdomain 4.1, checked 2026-10-22.
What a VPN Does
Subdomain 4.1 names the Virtual Private Network (VPN) among network security concepts. A VPN creates an encrypted tunnel so that traffic crossing an untrusted network is protected in transit. It is a connection control.
Source: ISC2 CC Exam Outline effective September 1, 2026 (v01/2026), subdomain 4.1, https://www.isc2.org/certifications/cc/cc-certification-exam-outline, checked 2026-10-22.
What a VPN Does Not Do
A VPN does not make an infected device safe. A scenario in which a remote device is compromised needs endpoint controls and identity checks as well. Choose the answer that addresses the failed layer.
What the Outline Lists for This Section
The outline names these items. Be able to explain each one in plain language and apply it to a short scenario:
- 4.1: Concepts (OSI model, TCP/IP model, IPv4, IPv6, VPN)
- 4.1: Firewalls (e.g., ports, applications)
- 4.1: Wireless (e.g., Wi-Fi, Bluetooth)
- 4.1: Embedded systems (e.g., Industrial Control System), Internet of Things (IoT)
Common Traps
A common trap is confusing a model with a protocol or device. The OSI and TCP/IP models describe layers; firewalls, wireless, and IP versions are the concepts the outline names.
A remote worker's laptop is infected, but the VPN connection is encrypted. What does this show?
A VPN protects the connection, not the endpoint
The VPN has failed and should be removed
Encryption makes the laptop safe
The network is secure without endpoint controls
The outline names the VPN as a network security concept. In a remote access scenario, pair the VPN with endpoint and identity controls, because the tunnel does not check the device or the user.
Sections you finish are checked off in the contents.