What are the two main capabilities of tunnel mode in IPsec site-to-site VPNs? (Choose two.)

The correct answer is C. It inserts a new IPsec header with new IP address. E. It encrypts the complete IP packet with the data field.. It inserts a new IPsec header with a new IP address. In tunnel mode, a new outer IP header is added, and the original IP packet is encapsulated. The outer header contains the IP addresses of the VPN endpoints (usually the IP addresses of the security gateways). It encrypts the co

Submitted by daniela_cl· Mar 5, 2026

Question

Options

AIt secures only the data field in the packet.
BIt transmits with the original packet header visible.
CIt inserts a new IPsec header with new IP address.
DIt authenticates the data field in original packet.
EIt encrypts the complete IP packet with the data field.

How the community answered

(16 responses)

A
6% (1)
C
88% (14)
D
6% (1)

Explanation

It inserts a new IPsec header with a new IP address. In tunnel mode, a new outer IP header is added, and the original IP packet is encapsulated. The outer header contains the IP addresses of the VPN endpoints (usually the IP addresses of the security gateways). It encrypts the complete IP packet with the data field. Tunnel mode encrypts the entire IP packet, including the original IP header and payload, ensuring that both the data and the original packet’s information are secure during transmission.

Topics

#IPsec VPNs#VPN tunnel mode

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice