In the corporate Internet module of SAFE SMR midsize network design, following termination of the VPN tunnel, traffic is sent through:

A.
A wireless device.

B.
A Layer 3 switch

C.
A router

D.
A Firewall

Explanation:
The firewall also acts as a termination point for site-to-site IPSec VPN tunnels for both remote site production and remote site management traffic.
Ref;Safe white papers;page 19
SAFE: Extending the Security Blueprint to Small, Midsize, and Remote-User Networks Reference: Cisco Courseware page 6-13