Which settings will meet these requirements?

Scenario: A Citrix Architect needs to configure a full VPN session profile to meet the following requirements:

✑ Users should be able to send the traffic only for the allowed networks through the VPN tunnel.

✑ Only the DNS requests ending with the configured DNS suffix workspacelab.com must be sent to NetScaler Gateway.

✑ If the DNS query does NOT contain a domain name, then DNS requests must be sent to NetScaler gateway.

Which settings will meet these requirements?
A . Split Tunnel to OFF, Split DNS Both
B . Split Tunnel to ON, Split DNS Local
C . Split Tunnel to OFF, Split DNS Remote
D . Split Tunnel to ON, Split DNS Remote

Answer: D

Explanation:

https://support.citrix.com/article/CTX207149