Which statement about TAP and TUN devices, which are used in a Linux/KVM cloud deployment model, is true?

TUN (tunnel) is a Layer 3 virtual device that processes raw IP packets, making it suitable for IP-level tunneling such as VPNs. TAP (network tap) is a Layer 2 virtual device that processes full Ethernet frames, simulating a physical NIC and supporting protocols that operate below IP.

This reverses the correct association - TUN operates at Layer 3 with IP packets, not Ethernet frames, and TAP operates at Layer 2 with Ethernet frames, not IP packets.

The TUN/TAP distinction is not about tapping versus tunneling but about the OSI layer each device operates at - both can be used for tunneling depending on the use case.

TUN processes IP packets at Layer 3, not Ethernet frames, and TAP processes Ethernet frames at Layer 2 - this choice incorrectly reassigns both devices to the wrong layer and function.