CAS-001 · Question #22
A telecommunication company has recently upgraded their teleconference systems to multicast. Additionally, the security team has instituted a new policy which requires VPN to access the company's…
The correct answer is C. Split tunneling is disabled. When split tunneling is disabled, all VPN client traffic - including internet-bound traffic - is forced through the VPN concentrator, significantly increasing its bandwidth utilization during meetings.
Question
A telecommunication company has recently upgraded their teleconference systems to multicast. Additionally, the security team has instituted a new policy which requires VPN to access the company's video conference. All parties must be issued a VPN account and must connect to the company's VPN concentrator to participate in the remote meetings. Which of the following settings will increase bandwidth utilization on the VPN concentrator during the remote meetings?
Options
- AIPSec transport mode is enabled
- BICMP is disabled
- CSplit tunneling is disabled
- DNAT-traversal is enabled
How the community answered
(40 responses)- A5% (2)
- B8% (3)
- C75% (30)
- D13% (5)
Why each option
When split tunneling is disabled, all VPN client traffic - including internet-bound traffic - is forced through the VPN concentrator, significantly increasing its bandwidth utilization during meetings.
IPSec transport mode encrypts only the payload and not the IP header, which slightly reduces overhead compared to tunnel mode but does not increase total bandwidth utilization on the concentrator.
Disabling ICMP reduces traffic by blocking ping and related control messages, which would decrease rather than increase bandwidth utilization.
Split tunneling disabled forces all network traffic from connected VPN clients through the VPN concentrator rather than allowing internet traffic to route directly, so the concentrator must handle both corporate and multicast video conference traffic simultaneously, dramatically increasing bandwidth consumption.
NAT-traversal encapsulates IPSec in UDP to pass through NAT devices and adds minimal packet overhead, but does not cause a meaningful increase in total bandwidth consumption.
Concept tested: VPN split tunneling and bandwidth impact
Source: https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/vpn/vpn-routing
Topics
Community Discussion
No community discussion yet for this question.