Split-tunneling allows only company data to pass through the VPN while other internet traffic continues to use the user's local ISP connection. This matches the described behavior.

DNS filtering blocks access to known malicious websites by comparing domain requests against a list of allowed or blocked URLs. It is an effective defense against phishing and other web-based attacks.
From Andrew Ramdayal's guide:
"URL filtering restricts access to specific websites or web content by comparing URLs against a predefined list of allowed or blocked sites...commonly used to prevent users from accessing malicious sites."

Network Functions Virtualization (NFV): NFV is a technology that virtualizes network services like routing, firewalls, and load balancers. It allows these services to run on virtual machines rather than requiring dedicated hardware. This is ideal for remote branch locations where deploying physical devices is costly and complex.
VRF (B): Virtual Routing and Forwarding is used for segmenting routing tables but does not virtualize services.
VLAN (C): Virtual Local Area Networks help segregate broadcast domains but are unrelated to virtualizing network functions.
VPC (D): Virtual Private Cloud is used for cloud computing but does not pertain to virtualizing network services.

A rack-mount PDU safely provides additional outlets for IDF equipment with proper load balancing and circuit protection, making it the most cost-effective solution.