Match each VPN architecture or tunneling mode with its correct definition: 1. Remote-access VPN 2. Site-to-site VPN 3. Full tunnel 4. Split tunnel A. Connects an individual endpoint device securely to a central network gateway B. Interconnects two network gateways to join distinct local networks together C. Routes all client traffic across the encrypted tunnel D. Routes only designated corporate traffic through the tunnel while allowing other traffic to access the internet directly

### The pairs\n| Item | Matches | Why |\n|---|---|---|\n| Remote-access VPN | Connects a user device to a gateway | The user client is one tunnel endpoint. |\n| Site-to-site VPN | Connects gateways protecting separate networks | Each gateway represents a private network. |\n| Full tunnel | Sends all client traffic through the VPN | Both internal and public traffic use the protected path. |\n| Split tunnel | Sends selected traffic through the VPN | Only included routes use the VPN; other traffic may go directly to the Internet. |\n\n### Terms\n- **VPN**: Virtual Private Network, a protected tunnel across another network.\n\n### Remember\nThe endpoints distinguish VPN designs; the selected routes distinguish tunnel modes.