A records firm may send guest traffic over an internet VPN. A stated control says the regulated dataset stays off the public internet. Which path can carry that dataset?
Select an answer to reveal the explanation.
Short Explanation
The guest road is fine for guests, and you do not put the regulated records on it. You carry that dataset on the private interconnect into the approved environment. A strong cipher on the internet VPN does not satisfy a control that says the public internet is off limits.
Full Explanation
The control, as the firm stated it, keeps the regulated dataset off the public internet. The path that meets that constraint is the private interconnect into the approved environment. The guest internet VPN can remain for guest traffic and still fails the control for the dataset, no matter how strong the cipher is. The control is about the dataset, not about guest web, so the two paths are not interchangeable. A direct breakout from guest wireless puts the dataset on the public internet by design. Exam caveat: this is a design fit for the stated control, not a legal opinion, and the interconnect does not by itself authorize the cloud service. The offering still has to be the one the control names. Operational check: routes for the regulated prefixes should point at the private interconnect, and the internet VPN should not list them.