Typically, Users Within a VPN Only Communicate with Other Users

Typically, users within a VPN only communicate with other users in the same VPN. They cannot communicate with users on the Internet or access the Internet. Many VPN sites, however, may need to access the Internet. Which of the following statements regarding interconnection between the VPN and the Internet are true?

A) The interconnection between the VPN and the Internet can be implemented on the PE. However, the implementation is complex and may bring security risks. The PE is vulnerable to DoS attacks from the Internet.
B) Directly connect the CE to the Internet on the user side. Each user site can independently access the Internet. That is, a default route destined for the Internet is configured on the CE of each site.
C) Configure the PE to send a default route destined for the Internet to the CE, and add a default route destined for the Internet gateway to the VPN instance routing table.
D) Isolating public network routes and VPN routes on the user side is simple, secure, and reliable.