Explain why a split-tunnel design can reduce central inspection, and identify the traffic affected.

### Why this is right\nCentral inspection can occur only for traffic that traverses the inspecting gateway. When a split-tunnel route sends public traffic directly to the Internet, that traffic bypasses the VPN gateway.\n\n### The concept\nA route determines the path used to reach a destination. Full tunneling sends all client traffic through the VPN, while split tunneling includes selected routes and excludes others. The security consequence is a visibility trade-off: excluded traffic may not receive the organization's central inspection.\n\n### What a good answer covers\n- Define split tunneling as routing selected traffic through the VPN.\n- Identify included traffic, such as internal applications.\n- Identify excluded traffic, such as public websites.\n- Explain that excluded traffic can bypass gateway inspection.\n\n### Remember\nIf traffic does not traverse the gateway, that gateway cannot inspect it.