N10-009 · Question #241
Which of the following configurations exempts traffic to the internet from traversing a VPN?
The correct answer is C. Split-tunnel. Split-tunneling is a VPN configuration that selectively routes traffic, allowing internet-bound traffic to bypass the VPN tunnel while corporate network traffic goes through it.
Question
Which of the following configurations exempts traffic to the internet from traversing a VPN?
Options
- AClient-to-site
- BActive-passive
- CSplit-tunnel
- DOut-of-band
How the community answered
(36 responses)- A6% (2)
- C92% (33)
- D3% (1)
Why each option
Split-tunneling is a VPN configuration that selectively routes traffic, allowing internet-bound traffic to bypass the VPN tunnel while corporate network traffic goes through it.
Client-to-site describes a type of VPN connection where a single client connects to a corporate network, but does not specify how internet traffic is handled.
Active-passive refers to a high-availability configuration where one device is active and another is passive, ready to take over, which is unrelated to VPN traffic exemption.
Split-tunneling is a VPN configuration where only traffic destined for the corporate network goes through the encrypted VPN tunnel. Other traffic, such as general internet browsing, directly exits the user's local network connection, thereby exempting it from VPN traversal and often improving internet performance.
Out-of-band refers to managing a device through a separate dedicated management channel, not a VPN traffic configuration.
Concept tested: VPN split-tunneling configuration
Source: https://www.cisco.com/c/en/us/products/security/anyconnect-secure-mobility-client/what-is-split-tunneling.html
Community Discussion
No community discussion yet for this question.