yes a VPN is the first answer, https is a good thing as well but no guarantee, i'm a security tester and if i was to setup my own fake network in a starbuck i could remove or replace the https of sites. By far the best method is a VPN from your workplace.
A good VPN will be fast as well, some cheaper services are very slow. Ideally your IT team will provide a good VPN back to the office for you.
Simple steps like asking at the hotel reception or cafe till for the official hotspot name and password, it will improve your chances of it being a proper network, its easy to setup something with a friendly name of "Free-WiFi" and its scary how many people will connect to it!
Also make sure when you connect to a network you computer should ask you if its a public / private / or work network, always choose public as this will set your firewall to the highest setting.
Also never ever ever ever accept a free USB stick from a trade show or anywhere - single most dangerous thing you can do. - But a VPN is great!