To enforce always-on VPN on ChromeOS, you need to use JSON configuration within the deployed VPN application settings. This method allows you to configure the VPN client to stay connected at all times, which is crucial for maintaining secure connections, especially in enterprise environments.

Verified Answer from Official Source:

The correct answer is verified from the ChromeOS VPN Configuration Guide, which specifies that JSON files are used to configure advanced VPN settings, including the always-on feature.

'To enforce an always-on VPN, configure the JSON settings file within the VPN client deployment. This setting ensures that the VPN remains active whenever the device is online.'

Using JSON configuration provides granular control over VPN settings and ensures the VPN remains active, reducing security risks associated with open network connections.

Objectives:

Implement secure VPN configurations on ChromeOS.

Enforce always-on VPN to protect data transmission.

ChromeOS VPN Configuration Guide