Which describes the function of a remote-access VPN?

A remote-access VPN (Virtual Private Network) is designed to provide secure connectivity for individual remote users to an organization's internal network. It establishes an encrypted tunnel over an untrusted network, like the internet, allowing the user to access resources as if they were directly connected to the corporate LAN. The option "Creates a secure tunnel between two branch sites" describes a site-to-site VPN, which connects entire networks, not individual remote users. "Uses cryptographic tunneling to protect multiple users simultaneously" is too broad; while true, it doesn't specify the remote access aspect. "Used only when the user is on the corporate internal network" is incorrect, as the primary purpose of a remote-access VPN is for users outside the corporate network.