When configuring a firewall security policy to permit outbound traffic from a local site to a remote branch over a site-to-site VPN, the local internal subnet is specified as the source address and the remote internal subnet is specified as the destination address.
Answer
True
Explanation
### Why this is right
The lab says the Internal-to-VPN_TUNNEL_01 rule uses the local internal subnet as its source and the partner's internal subnet as its destination. Site A is 172.17.10.0/24 and Site B is 172.17.20.0/24.
### The concept
Security-policy source and destination values follow the direction of the traffic being permitted. For the reverse VPN_TUNNEL_01-to-Internal rule, the zones and subnet roles are reversed. This is why the two policies are directional rather than identical.
### Terms
- **VPN**: Virtual Private Network. Connects networks through a protected logical path.
- **Subnet**: A defined range of Internet Protocol addresses.
### Remember
For Site A outbound VPN traffic, local Site A is the source and Site B is the destination.
Related Questions
- Which statement best describes the protection a Virtual Private Network (VPN) provides?(basic)
- A VPN that encrypts traffic also guarantees that the applications on both endpoints are safe.(basic)
- Explain why a split-tunnel design can reduce central inspection, and identify the traffic affected.(advanced)
- Select ALL protection goals a VPN can support directly through the mechanisms described in the course.(intermediate)
- Compare remote-access and site-to-site VPN designs, including their endpoints and a suitable example of each.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free