Examkin

Question

Difficulty: MediumVirtual Private Networks and Remote Access Security

A network administrator is reviewing security logs for remote employees connecting to the corporate network via a client-based Remote Access Virtual Private Network (VPN). The administrator discovers that while remote users can access internal private servers, their web browsing traffic to external internet sites is being routed directly through their local home internet service providers rather than through the corporate firewall and web content filter. Which of the following configuration settings on the VPN concentrator or client profile should the administrator modify to ensure all network traffic from remote clients is routed through the secure tunnel?

  1. Disable split tunneling and enforce a full-tunnel VPN configuration.Answer
  2. B
    Reconfigure the IPsec encapsulation mode from Tunnel mode to Transport mode.
  3. C
    Change the VPN transport protocol from UDP port 500 to TCP port 443.
  4. D
    Replace RADIUS authentication with TACACS+ authentication on the VPN gateway.

Answer

Disable split tunneling and enforce a full-tunnel VPN configuration.
Split tunneling allows a remote user's device to route internet-bound traffic directly through their local network while only routing corporate-bound traffic through the VPN. Disabling split tunneling and implementing a full-tunnel VPN configuration modifies the client's routing table so that all network traffic—regardless of destination—is encapsulated and forwarded to the corporate VPN gateway for processing and security inspection.

Step-by-Step Solution

1
Analyze the observed network behavior.
Internal corporate traffic enters the VPN tunnel, while external internet traffic bypasses the tunnel and exits directly via the remote user's local interface.
This behavior describes split tunneling, where only specific corporate subnets are directed into the VPN tunnel, leaving all other destination traffic on the default local default gateway.
2
Identify the security requirement.
All client traffic must be routed to the corporate network so central security policies (firewalling, web filtering, DLP) can be applied.
Full tunneling redirects the client's default route into the VPN tunnel, sending all outbound IP packets to the VPN gateway.
3
Select the correct profile configuration.
Disabling split tunneling (enforcing full-tunnel mode) forces all traffic through the corporate gateway.
Full tunneling ensures zero traffic bypasses security inspection, meeting the requirement.

Key Concept

Split Tunneling vs. Full Tunneling VPN Configurations
Rate this question

Topics

Virtual Private Networks and Remote Access Security

More questions from this topic