H12-725_V4.0 · Question #312
SSL VPN works between the transport layer and the network layer and does not change the IP header and TCP header.
The correct answer is A. True. A is correct because SSL VPN operates at the Application Layer (Layer 7) of the OSI model - above both the Transport Layer (Layer 4) and Network Layer (Layer 3). Since it sits above these layers, SSL/TLS encrypts only the payload/application data and leaves the IP header and…
Question
SSL VPN works between the transport layer and the network layer and does not change the IP header and TCP header.
Options
- ATrue
- BFalse
How the community answered
(25 responses)- A72% (18)
- B28% (7)
Explanation
A is correct because SSL VPN operates at the Application Layer (Layer 7) of the OSI model - above both the Transport Layer (Layer 4) and Network Layer (Layer 3). Since it sits above these layers, SSL/TLS encrypts only the payload/application data and leaves the IP header and TCP header completely untouched. This is a fundamental architectural difference from IPSec VPN, which operates at the Network Layer and can encapsulate or modify IP headers.
B is wrong because it would imply SSL VPN modifies lower-layer headers, which is not the case - that behavior belongs to IPSec (especially in tunnel mode), not SSL VPN.
Memory tip: Think of it as a stack - SSL VPN encrypts the "contents of the envelope" (application data), while IPSec rewrites the "address on the envelope" (IP header). SSL VPN rides on top of TCP/IP without disturbing it; IPSec works inside it.
Topics
Community Discussion
No community discussion yet for this question.