问题：

[单选] When designing remote access to the Enterprise Campus network for teleworkers and mobileworkers， which of the following should the designer consider？（）

A .  It is recommended to place the VPN termination device in line with the Enterprise Edge 1
B .  Maintaining access rules， based on the source IP of the client， on an internal firewall drawnfrom a headend RADIUS server is the most secure deployment
C .  VPN Headend routing using Reverse Route Injection （RRI） with distribution is recommended when the remote user community is small and dedicated DHCP scopes are in place
D .  Clientless SSL VPNs provide more granular access control than SSL VPN clients （thin or thick），including at Layer 7