(ISC)2 Certified in Cybersecurity Practice Exam

Do Split Tunnel VPNs provide users with a false sense of security?

1. True

2. False

The correct answer is: True

Split Tunnel VPNs can indeed create a false sense of security for users, as they allow users to access both public internet and private network resources simultaneously. When users utilize a split tunnel configuration, only the traffic destined for the corporate network is routed through the VPN, while all other traffic, such as that accessing the internet, is sent directly. This can lead users to believe that all their internet activity is secure simply because they are connected to the VPN. However, any connections outside of the VPN tunnel, which are not secured, expose sensitive information and can be subject to various security threats. Users might feel an unwarranted level of security thinking they are protected for all their activities, even though only a portion is actually encrypted and secured through the VPN. The convenience of split tunneling might also encourage risky behaviors, like accessing untrusted websites while still being connected to the VPN, making it important for organizations to adequately educate their users on the limitations of this configuration and promote safe browsing practices.