SOA-C02 · Question #351
A SysOps administrator configuring AWS Client VPN to connect use's on a corporate network to AWS resources mat are running in a VPC According to compliance requirements, only traffic that is…
The correct answer is B. On the Client VPN endpoint, turns on the split-tunnel option. Split tunnel on client, so traffic destined to resources other than VPN destination will use local internet or intranet. Otherwise everything will go through the VPN tunnel. https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-working-endpoints.html#cvpn…
Question
A SysOps administrator configuring AWS Client VPN to connect use's on a corporate network to AWS resources mat are running in a VPC According to compliance requirements, only traffic that is destined for the VPC can travel across the VPN tunnel. How should the SysOps administrator configure Client VPN to meet these requirements?
Options
- AAssociate the Client VPN endpoint with a private subnet that has an internet route through a NAT
- BOn the Client VPN endpoint, turns on the split-tunnel option.
- COn the Client VPN endpoint, specify DNS server IP addresses.
- DSelect a private certificate to use as the identity certificate tor the VPN client.
How the community answered
(41 responses)- A10% (4)
- B80% (33)
- C2% (1)
- D7% (3)
Explanation
Split tunnel on client, so traffic destined to resources other than VPN destination will use local internet or intranet. Otherwise everything will go through the VPN tunnel. https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-working-endpoints.html#cvpn- working-endpoint-create
Topics
Community Discussion
No community discussion yet for this question.