Which VPN configuration should be used to redirect only necessary traffic for remote users?
Which of the following should be implemented to allow remote users to access network resources while only redirecting necessary traffic?
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests your ability to distinguish split-tunnel from full-tunnel VPN configurations; the trap is choosing a generic client-to-site VPN without recognizing that the phrase 'only redirecting necessary traffic' specifically describes split tunneling.
According to community consensus on the CompTIA Network+ N10-008 exam, the correct answer is A: a split-tunnel VPN is the configuration that lets remote users access network resources while only redirecting necessary traffic through the VPN. This approach sends only corporate-bound traffic through the encrypted tunnel, leaving other internet traffic on the local connection.
C. Client-to-site VPN is the most common wrong answer because remote access naturally points to client-to-site—but that type of VPN only establishes the connection; without split tunneling it typically routes all traffic through the VPN. The key clue is 'only redirecting necessary traffic,' which points to split-tunnel.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
The question asks for a configuration that allows remote users to access network resources while only redirecting necessary traffic. That is exactly what split tunneling provides. A split-tunnel VPN routes only traffic destined for the corporate network through the VPN tunnel, while all other traffic goes directly to the internet. This matches the definition and the exam scenario precisely.
Why the Other Options Are Wrong
Option C, Client-to-site VPN, is the closest distractor because it is a remote-access VPN protocol, but by itself it does not specify traffic filtering. A client-to-site VPN typically uses full-tunnel mode unless split tunneling is explicitly configured. Geofencing (B) restricts access based on physical location, and Remote Desktop Gateway (D) provides access to a single remote desktop rather than to general network resources with selective routing.
Community Comment Notes
All community comments agree that A is correct. Commenter [1] explains that split tunneling is a networking configuration where only specific traffic is routed through a VPN while remaining data is sent directly over the internet. Commenter [2] reinforces that this reduces load on the VPN and optimizes performance. Commenter [3] provides a simple mnemonic: 'Splitting traffic = split-tunnel; No splitting traffic = full-tunnel.'
Official Reference
Exam Strategy
Look for key phrases such as 'only redirecting necessary traffic' to signal split-tunnel VPN. Remember that 'split' means traffic is divided between the VPN and the local internet connection, while 'full tunnel' would send all traffic through the VPN.