A retailer's VPN concentrator serves every store normally, except one laptop whose outdated client cannot complete the tunnel. Where should the fix be applied?
Select an answer to reveal the explanation.
Short Explanation
One bad badge does not mean the front door is broken for the whole company. You update the outdated VPN client on that one laptop, because every other store already completes the tunnel. Replacing the shared circuit or moving a data-center probe will not refresh the client that is failing.
Full Explanation
Every store completes the VPN except one laptop whose client is outdated and cannot finish the tunnel. The concentrator and the path are already proven by the healthy stores, so the fix belongs on that outdated client. Replacing the WAN circuit shared by stores whose tunnels already work would change a path that is carrying successful sessions and would leave the old client in place. A BGP alert for prefixes the concentrator already reaches from healthy stores watches routing that those stores have shown is fine. Moving a data-center Enterprise Agent closer to the concentrator changes a probe's vantage point and does not update the VPN software on the failing laptop. The healthy stores are the control that keeps the concentrator and the shared circuit off the suspect list. Exam caveat: a single outdated client can look like a concentrator outage if you only hear about the one user; the healthy population is what clears the shared gear. Operational check: compare the VPN client on the failing laptop with a laptop at a healthy store, and confirm the tunnel completes once that client is brought in line.