What is the main purpose of a site-to-site virtual private network (VPN)?

### Why this is right A site-to-site VPN protects traffic exchanged between networks at different locations. The tunnel provides a protected path across an Internet-facing connection; it does not remove the need for routes or security rules. ### The concept Each firewall communicates with its peer over a reachable external interface. Traffic destined for the remote network is routed into a virtual tunnel interface, then protected by the VPN configuration. A VPN connects networks, rather than simply giving each host Internet access. ### The other options - **B. To assign a public address to every internal host**: public addressing is not the purpose of a VPN, and internal hosts can retain private addresses. - **C. To replace all routing decisions on both firewalls**: routes are still needed to direct remote-subnet traffic into the tunnel. - **D. To permit management access to a firewall without authentication**: a VPN does not remove management authentication. ### Terms - **VPN**: Virtual Private Network, a protected connection over a less trusted network. - **Firewall**: A network device that controls traffic according to configured rules. ### Remember A site-to-site VPN protects inter-site traffic, while routes decide which traffic enters it.