What is the best VPN for encrypting/routing only traffic to a specific destination?
Which of the following is the best VPN to use for only encrypting and routing data for a specific destination?
Community Votes
69% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests your understanding of split-tunnel's selective routing capability, and the trap is confusing 'specific destination' with site-to-site's fixed two-site connection, which actually encrypts all traffic between those sites.
In CompTIA Network+ N10-008, split-tunnel VPN is the correct answer because it selectively encrypts and routes only traffic destined for a specific network, while other traffic uses the regular internet. Community votes favor A with 69%, making it the consensus choice despite some debate.
B. Site-to-site is the common wrong answer because test-takers focus on 'specific destination' as a fixed remote site, but site-to-site encrypts all traffic between two networks, not just traffic for one specific destination or host.
Community Discussion (6 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Split-tunnel VPN (A) is specifically designed to route only designated traffic through the encrypted VPN tunnel while letting all other traffic access the internet directly. The question asks for a VPN that encrypts and routes data for 'a specific destination,' which matches split-tunnel's ability to target a single subnet or host. Comment [1] correctly explains that split-tunnel selectively routes traffic to a particular network, and comment [3] reinforces this by noting that only part of the traffic goes over the VPN. Therefore, A is the best answer.Why the Other Options Are Wrong
B. Site-to-site VPNs create a permanent encrypted tunnel between two entire networks, encrypting all traffic that flows between those sites—not just traffic for one specific destination. Comment [5] argues site-to-site is specific because it connects two sites, but that contradicts the question's 'only encrypting and routing data for a specific destination'—a site-to-site tunnel carries all inter-site traffic, not a subset. C. Client VPNs are remote-access tunnels for individual users and do not inherently restrict traffic to a specific destination. D. Layer 2 VPNs operate at the data-link layer and are not the typical choice for selectively routing traffic to a destination; they create transparent L2 connectivity between sites. Thus, none of these fit as well as split-tunnel.Community Comment Notes
Comment [1] and [3] provide strong, accurate explanations for A, and the 69% vote share shows clear consensus. Comment [2] and [4] lean toward B, but they overlook that site-to-site encrypts all traffic between two locations, not just traffic for a specific destination. Comment [5] even acknowledges the question is 'poorly structured' while still misinterpreting 'specific destination' as the site-to-site case. The exam expects you to recognize that split-tunnel can send only a chosen destination's traffic through the tunnel, making A the correct choice.Official Reference
Exam Strategy
When you see phrases like 'only encrypting and routing data for a specific destination,' immediately think of split-tunnel—it's the VPN configuration that separates traffic into encrypted and non-encrypted paths. Don't confuse 'specific destination' with a fixed site; site-to-site VPNs encrypt all traffic between two sites, not just traffic for one destination. Always match the question's qualifier 'only' to the selective nature of split-tunnel.