mediumMultiple ChoiceObjective-mapped
220-1102 Practice Question: A technician is configuring a new Windows 10…
A technician is configuring a new Windows 10 workstation for a remote employee. The employee will use the laptop to access company resources via VPN. Which security setting should be configured to ensure the VPN connection is always used when accessing the internet?
⚠ Common exam trap
CompTIA often tests the misconception that enabling split tunneling improves security by reducing VPN load, when in fact it creates a security risk by allowing non-VPN traffic to bypass corporate security controls.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Disable split tunneling to force all traffic through the VPN.
Disabling split tunneling ensures that all network traffic, including internet-bound traffic, is routed through the VPN tunnel. This forces the VPN connection to be always used when accessing the internet, which is essential for enforcing security policies and ensuring that company resources are protected even when the remote employee accesses external websites.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable split tunneling to improve performance.
Why it's wrong here
Enabling split tunneling allows internet-bound traffic to bypass the corporate VPN tunnel and go directly to the internet, while only corporate network traffic traverses the VPN. While this can improve perceived internet performance by reducing latency and bandwidth consumption on the VPN server, it significantly compromises security. Bypassing the VPN means the workstation's internet traffic is not subject to corporate firewalls, intrusion detection systems, or content filtering, exposing the company network to potential threats from the local internet connection.
- ✓
Disable split tunneling to force all traffic through the VPN.
Why this is correct
Disabling split tunneling, also known as "full tunnel" VPN, ensures that all network traffic originating from the workstation, regardless of its destination (internal corporate network or external internet), is routed through the encrypted VPN tunnel to the corporate network. This forces all traffic to be inspected and filtered by corporate security appliances before reaching its final destination. This configuration is crucial for maintaining a consistent security posture and enforcing corporate policies, as it prevents any traffic from bypassing the secure corporate perimeter.
- ✗
Configure the VPN to use PPTP protocol.
Why it's wrong here
Configuring the VPN to use the Point-to-Point Tunneling Protocol (PPTP) is an insecure choice for modern VPN deployments. PPTP is an older protocol known to have significant security vulnerabilities, making it susceptible to various attacks, including credential harvesting and data interception. While the question is about ensuring all traffic goes through the VPN, selecting an insecure protocol like PPTP would undermine the entire purpose of using a VPN for secure communication, regardless of the tunneling configuration.
- ✗
Set the VPN to connect only when accessing internal websites.
Why it's wrong here
Setting the VPN to connect only when accessing internal websites is not a standard or practical configuration for ensuring all internet traffic is secured through a corporate VPN. This approach would leave all external internet traffic unencrypted and unprotected, completely bypassing the corporate security infrastructure. Such a setting would contradict the objective of maintaining a consistent security posture for all workstation network communications, as it would only provide security for a subset of traffic.
Go deeper
Related to this question
Learn chapter
Windows Editions and Features
Key term
Windows 10
Windows 10 is a personal computer operating system developed by Microsoft that combines the familiarity of Windows 7 with the modern features of Windows 8, designed to run on a wide range of devices from desktops to tablets.
Key term
Windows
Windows is a family of operating systems developed by Microsoft that manages computer hardware and software, providing a graphical user interface for users to interact with their devices.
About these practice questions
This 220-1202 question is part of Courseiva's 495-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.