Traffic limiting can be applied at which scope for VPN tunnels?

• A. On the client
• B. On the server
• C. At the tunnel level
• D. On the LAN

Answer: (C)

Limiting traffic at the tunnel boundary ensures you control exactly the traffic that traverses the VPN, regardless of which devices are sending or receiving it. This scope is ideal because it targets the encapsulated data crossing the VPN, so the VPN’s overall bandwidth is capped without inadvertently affecting other networks or hosts. Limiting on the client would affect only that single device’s traffic, leaving other users of the same tunnel potentially unconstrained. Limiting on the server would apply to all traffic handled by that server, not just VPN traffic, which can be too broad and disruptive. Limiting on the LAN confines traffic to the local network and doesn’t specifically control the VPN tunnel’s payload. In practice, you apply the limit to the tunnel’s interface (the VPN boundary), which cleanly manages the tunnel’s bandwidth while leaving other paths untouched.