A remote worker must send both internal application traffic and public website traffic through the organization's gateway for central inspection. Which design fits?

### Why this is right\nA full tunnel routes all client traffic through the VPN gateway, including public website traffic. That allows the organization to inspect traffic centrally.\n\n### The concept\nRemote access describes the endpoints, a user device and a gateway. Full or split tunnel describes which client routes use the VPN. These are separate design choices. A site-to-site tunnel connects networks through gateways rather than connecting an individual worker.\n\n### The other options\n- **Split-tunnel remote access with public traffic excluded**: excluded public traffic goes directly to the Internet and may avoid central inspection.\n- **Site-to-site tunneling between two office gateways**: this connects networks, not the remote worker's client.\n- **A tunnel that carries only local network broadcasts**: this does not meet the requirement to route all client traffic through the gateway.\n\n### Remember\nChoose full tunnel when all client traffic must pass through central inspection.