When VPN is disconnected inside TCS, DNS requests use the default corporate DNS infrastructure - in this case, TCS DNS servers. The request to hermes.nielsen.com reaches TCS DNS servers and gets resolved (or fails if the domain is only accessible via VPN). Option B is incorrect because VPN is disconnected.