Free Cisco 300-730 SVPN Actual Exam Questions - Question 4 Discussion
Refer to the exhibit. 
The network administrator must allow the Cisco AnyConnect Secure Mobility Client to securely access the corporate resources via IKEv2 and print locally. Traffic that is destined for the Internet must still be tunneled to the Cisco ASA. Which configuration does the administrator use to accomplish this goal?
A Split include policy with a permit for 192.168.0.0/24 (D) makes sense because it allows local subnet traffic like printing to go outside the tunnel, while everything else (like internet traffic) still goes through the ASA. The other options either exclude specific hosts or tunnel all traffic, which conflicts with the need to print locally but secure internet access through the VPN. So, D is the only one that fits the described setup cleanly without overcomplicating or breaking the required traffic flow.
D/C? D seems best for local printing access while still tunneling the internet, but if the local subnet isn’t correctly defined, C ensures everything is tunneled securely, just less flexible.
A/B? Excluding or permitting single hosts seems too narrow. The question wants local printing and internet tunneled, so a policy focusing on a broader subnet or all traffic looks more fitting than those options.
Probably D since it precisely includes local subnet for printing but tunnels internet traffic.
D makes the most sense here since a split include policy with the local subnet allows local access like printing, and everything else including internet traffic goes through the tunnel. A split exclude wouldn’t guarantee local print access properly because it blocks specific IPs rather than specifying what to include. C (tunnel all) would force all traffic over the VPN, which blocks local resources like printers. B doesn’t look right since 0.0.0.0/32 is just one single IP, not a network range, so it won’t cover what’s needed.
This one’s about keeping local printing while still tunneling internet traffic, so C sounds right since it tunnels everything through the ASA. C