Refer to the exhibit A network engineer configures direct internet access for users in a branch. Users in subnet 10.10.0.0/24 and 10.20.0.0/24 must have direct internet access. Which configuration…

VPN defines a virtual routing and forwarding instance, not specific IP subnets for policy matching within a VPN.

When implementing direct internet access (DIA) for specific user subnets (like 10.10.0.0/24 and 10.20.0.0/24) in Cisco Catalyst SD-WAN, these subnets are identified as 'data prefixes' within a prefix list. This prefix list, created under the 'Create groups of interest' in vManage, allows for precise policy matching to steer traffic from these subnets directly to the internet.

A policer is used for traffic rate limiting and shaping, not for defining groups of IP prefixes that require direct internet access.

A site defines a physical location in the SD-WAN fabric, not specific IP subnets that need direct internet access configuration.