Versa Secure Access (VSA) is designed to provide secure remote access for users. LDAP can indeed be used to authenticate remote secure access users, making Option B accurate. Additionally, VSA supports multi-factor authentication to enhance security, which makes Option C correct. Option A is not necessarily true because the VSA gateway does not always have to be hosted in a public cloud; it can be hosted in various environments. Option D is incorrect as the VSA client does support split tunneling.