Implementing Secure Solutions with Virtual Private Networks (SVPN) — Question 57

An administrator must guarantee that remote access users are able to reach printers on their local LAN after a VPN session is established to the headquarters. All other traffic should be sent over the tunnel. Which split-tunnel policy reduces the configuration on the ASA headend?

Answer options

• A. include specified
• B. exclude specified
• C. tunnel specified
• D. dynamic exclude

Correct answer: B

Explanation

The correct answer is B, exclude specified, because it allows traffic to the specified local resources, like printers, while sending all other traffic through the VPN tunnel. The other options either do not accomplish this goal or require more complex configurations that do not align with the requirement of reducing configuration on the ASA headend.