nerdexam
CompTIA

CAS-001 · Question #22

A telecommunication company has recently upgraded their teleconference systems to multicast. Additionally, the security team has instituted a new policy which requires VPN to access the company's…

The correct answer is C. Split tunneling is disabled. When split tunneling is disabled, all VPN client traffic - including internet-bound traffic - is forced through the VPN concentrator, significantly increasing its bandwidth utilization during meetings.

Technical Integration of Enterprise Components

Question

A telecommunication company has recently upgraded their teleconference systems to multicast. Additionally, the security team has instituted a new policy which requires VPN to access the company's video conference. All parties must be issued a VPN account and must connect to the company's VPN concentrator to participate in the remote meetings. Which of the following settings will increase bandwidth utilization on the VPN concentrator during the remote meetings?

Options

  • AIPSec transport mode is enabled
  • BICMP is disabled
  • CSplit tunneling is disabled
  • DNAT-traversal is enabled

How the community answered

(40 responses)
  • A
    5% (2)
  • B
    8% (3)
  • C
    75% (30)
  • D
    13% (5)

Why each option

When split tunneling is disabled, all VPN client traffic - including internet-bound traffic - is forced through the VPN concentrator, significantly increasing its bandwidth utilization during meetings.

AIPSec transport mode is enabled

IPSec transport mode encrypts only the payload and not the IP header, which slightly reduces overhead compared to tunnel mode but does not increase total bandwidth utilization on the concentrator.

BICMP is disabled

Disabling ICMP reduces traffic by blocking ping and related control messages, which would decrease rather than increase bandwidth utilization.

CSplit tunneling is disabledCorrect

Split tunneling disabled forces all network traffic from connected VPN clients through the VPN concentrator rather than allowing internet traffic to route directly, so the concentrator must handle both corporate and multicast video conference traffic simultaneously, dramatically increasing bandwidth consumption.

DNAT-traversal is enabled

NAT-traversal encapsulates IPSec in UDP to pass through NAT devices and adds minimal packet overhead, but does not cause a meaningful increase in total bandwidth consumption.

Concept tested: VPN split tunneling and bandwidth impact

Source: https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/vpn/vpn-routing

Topics

#VPN#split tunneling#bandwidth utilization#multicast

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice