Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 552

An engineer must modify an existing remote access VPN using a Cisco AnyConnect Secure Mobility client solution and a Cisco Secure Firewall. Currently, all the traffic generated by the user is sent to the VPN tunnel and the engineer must now exclude some servers and access them directly instead. Which element must be modified to achieve this goal?

Answer options

• A. NAT exemption
• B. encryption domain
• C. routing table
• D. group policy

Correct answer: D

Explanation

The correct answer is D, group policy, because modifying the group policy allows the engineer to define which traffic should bypass the VPN. Options A, B, and C do not directly control the traffic flow for specific servers in relation to the VPN setup.