nerdexam
Palo_Alto_Networks

PCCET · Question #31

Which IPsec feature allows device traffic to go directly to the Internet?

The correct answer is A. Split tunneling. Split tunneling is an IPsec/VPN configuration that allows selected traffic (e.g., corporate traffic) to traverse the encrypted VPN tunnel while all other traffic (e.g., general Internet browsing) goes directly out the local Internet connection, bypassing the tunnel…

Submitted by noor.lb· Apr 18, 2026Network Security

Question

Which IPsec feature allows device traffic to go directly to the Internet?

Options

  • ASplit tunneling
  • BDiffie-Hellman groups
  • Cd.Authentication Header (AH)
  • DIKE Security Association

How the community answered

(39 responses)
  • A
    90% (35)
  • B
    3% (1)
  • C
    5% (2)
  • D
    3% (1)

Explanation

Split tunneling is an IPsec/VPN configuration that allows selected traffic (e.g., corporate traffic) to traverse the encrypted VPN tunnel while all other traffic (e.g., general Internet browsing) goes directly out the local Internet connection, bypassing the tunnel. Diffie-Hellman is a key-exchange algorithm, Authentication Header (AH) provides data integrity, and IKE SA is the negotiation mechanism - none of these route traffic directly to the Internet.

Topics

#IPsec VPNs#Split Tunneling#Network Routing

Community Discussion

No community discussion yet for this question.

Full PCCET Practice