A client-to-site VPN and a split-tunnel VPN are the best options for designing a secure remote access scheme that meets the given requirements. A client-to-site VPN allows users at multiple locations to access corporate resources over the internet by creating a secure tunnel between their devices and a VPN concentrator on the corporate network1. A split-tunnel VPN allows the on-premises equipment to handle only the traffic that is destined for the corporate resources, while the non-corporate traffic is routed directly to the internet without passing through the VPN tunnel2. This reduces the bandwidth and processing load on the corporate network and improves the performance of the remote access.
References:
* Remote Access - N10-008 CompTIA Network+ : 4.41
* comptia Network+ : Remote Access Methods And Network Monitoring2