Question

Difficulty: EasyRemote Access and Site-to-Site VPN Concepts

A system administrator is configuring a client-based remote access VPN on company laptops. The configuration specifies that only traffic destined for internal corporate network ranges (10.0.0.0/810.0.0.0/8) should be directed through the encrypted VPN tunnel, while all unsecured internet traffic should go directly out the user's local internet connection. Which VPN feature is being implemented?

  1. Split tunnelingAnswer
  2. B
    Full tunneling
  3. C
    IPsec transport mode
  4. D
    Dynamic Multipoint VPN (DMVPN)

Answer

Split tunneling is the feature that allows specified internal corporate traffic to pass through the VPN tunnel while general internet traffic routes directly through the local internet connection.
Split tunneling allows remote VPN users to access internal network resources securely over an encrypted tunnel while accessing internet resources directly via their local gateway, reducing corporate bandwidth consumption.

Step-by-Step Solution

1
Analyze the requirements described in the scenario.
Identified that corporate traffic (10.0.0.0/810.0.0.0/8) must be encrypted inside the tunnel, while local internet traffic bypasses the tunnel.
VPN client routing behavior can be controlled by defining split-tunnel policies.
2
Evaluate the defined VPN feature terms.
Split tunneling separates VPN traffic from internet traffic, whereas full tunneling sends all host traffic through the tunnel.
Matching the scenario behavior directly to the definition of split tunneling.

Key Concept

Remote access VPN client routing policies (Split Tunneling vs. Full Tunneling)
Estimated Time:45s
Rate this question