nerdexam
Fortinet

NSE4 · Question #446

Which of the following statements are true about IPsec VPNs? (Choose three.)

The correct answer is A. IPsec increases overhead and bandwidth. D. IPsec protects upper layer protocols. E. IPsec operates at the layer 3 of the OSI model. IPsec VPNs operate at Layer 3 of the OSI model, provide protection for upper-layer protocols, and introduce overhead that increases bandwidth consumption.

Submitted by the_admin· Apr 18, 2026VPN and Routing

Question

Which of the following statements are true about IPsec VPNs? (Choose three.)

Options

  • AIPsec increases overhead and bandwidth.
  • BIPsec operates at the layer 2 of the OSI model.
  • CEnd-user's network applications must be properly pre-configured to send traffic across the
  • DIPsec protects upper layer protocols.
  • EIPsec operates at the layer 3 of the OSI model.

How the community answered

(52 responses)
  • A
    87% (45)
  • B
    8% (4)
  • C
    6% (3)

Why each option

IPsec VPNs operate at Layer 3 of the OSI model, provide protection for upper-layer protocols, and introduce overhead that increases bandwidth consumption.

AIPsec increases overhead and bandwidth.Correct

IPsec encapsulation and encryption add extra header information and data, which increases the size of packets and thus contributes to higher overhead and bandwidth usage.

BIPsec operates at the layer 2 of the OSI model.

IPsec operates at Layer 3 (the Network Layer) of the OSI model, focusing on securing IP packets, not at Layer 2 (the Data Link Layer).

CEnd-user's network applications must be properly pre-configured to send traffic across the

IPsec operates transparently at the network layer, meaning end-user applications do not need specific configurations; the operating system and routing handle traffic forwarding across the VPN.

DIPsec protects upper layer protocols.Correct

IPsec provides security services like confidentiality, integrity, and authenticity for the IP packets themselves, thereby protecting the data of all higher-layer protocols (Layer 4 and above) contained within those packets.

EIPsec operates at the layer 3 of the OSI model.Correct

IPsec is fundamentally designed to operate at the Network Layer (Layer 3) of the OSI model, securing IP communications at that level transparently to applications.

Concept tested: IPsec VPN characteristics and OSI layer

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/867295/ipsec-vpn

Topics

#IPsec VPN#OSI Model#Network Overhead#Protocol Security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NSE4 Practice