Which two secure deployment models are appropriate for a Qlik Sense environment planned to scale up to 5000 users?

The selection of creating a VPN to enable external access and deploying Qlik Sense in a DMZ with a reverse proxy is appropriate for a scalable Qlik Sense environment serving up to 5000 users for several reasons.

Firstly, utilizing a VPN (Virtual Private Network) ensures secure connections for users accessing the Qlik Sense environment from outside the corporate network. This is crucial when dealing with sensitive data and protecting it from unauthorized access. A VPN encrypts the data transmitted between users and the Qlik Sense server, providing a layer of security necessary for corporate environments.

Secondly, deploying Qlik Sense in a DMZ (Demilitarized Zone) with a reverse proxy is a standard practice for handling external traffic securely. A reverse proxy acts as an intermediary for requests from clients seeking resources from the server, helping to manage and monitor incoming traffic while safeguarding the internal network. This setup not only balances loads but also adds another layer of security by filtering requests before they reach the main infrastructure.

This combination allows organizations to provide necessary access to large user bases while maintaining robust security protocols, making it a suitable choice for environments anticipating growth to 5000 users. This approach aligns well with enterprise security standards and scalability considerations.