An engineer is modifying an existing data policy for VPN 115 to meet these additional requirements: When browsing government websites, the traffic must use direct internet access. The source address of the traffic leaving the site toward the government websites must be set to an IP range associated with the country itself, a particular TLOC. The policy configuration is as follows: interface GigabitEthernet0/0/0.100 ip address 198.51.100.2 255.255.255.252 ip nat outside no shutdown ! interface GigabitEthernet0/1/0.10 ip address 10.254.254.2 255.255.255.252 no shutdown ! sdwan interface GigabitEthernet0/0/0.100 tunnel-interface encapsulation ipsec color biz-internet allow-service all ! interface GigabitEthernet0/1/0.10 tunnel-interface encapsulation ipsec color private1 allow-service all ! ip route 0.0.0.0 0.0.0.0 198.51.100.1 ip route 0.0.0.0 0.0.0.0 10.254.254.1 ! data-policy DIA vpn-list VPN-115 sequence 10 match destination-data-prefix-list INTERNAL-NETWORKS ! action accept sequence 20 match destination-ip 0.0.0.0/0 ! action accept nat use-vpn 0 ! ! default-action accept (Choose one answer)

• A. sequence 30
  match
  destination-data-prefix-list GOVERNMENT-WEBSITES
  !
  action accept
  set
  local-tloc-list
  color biz-internet
• B. sequence 15
  match
  source-data-prefix-list GOVERNMENT-WEBSITES
  !
  action accept
  set
  local-tloc-list
  color private1
• C. sequence 25
  match
  destination-data-prefix-list GOVERNMENT-WEBSITES
  !
  action accept
  nat use-vpn 0
• D. sequence 15
  match
  destination-data-prefix-list GOVERNMENT-WEBSITES
  !
  action accept
  set
  local-tloc-list
  color biz-internet

Correct Answer: D

Brave-Dump Clients Votes