I can't find the name of the test now that I've taken it, but on the "Protect yourself over the holidays", episode, the first question says that you are at an airport on wifi and immediately connect to your company VPN, are you secure or not.
The answer in the test is that yes, it is secure, but that isn't always true. Many companies only send the LAN info across the VPN, but allow internet traffic to go out the local ISP instead of through the VPN. If the owner of the wifi was malicious and routed the DNS of various websites like google or banking sites to their own site under HTTP, they could get passwords. Or, if they were really tricky, route DNS of legitimate site to a similar enough URL that does have a certificate and is https that many people wouldn't notice.
So the correct answer to that question would be "it depends" or no, it's not. It depends a lot on the VPN configuration of your organization and it's something people should be aware of and know what their organization's configuration is.
Kirjaudu sisään jättääksesi kommentin.