An organization has implemented an IPSec VPN access for remote users. Which of the following IPSec modes would be the MOST secure for this organization to implement?

The correct answer is A. Tunnel mode. In both ESP and AH cases with IPSec Transport mode, the IP header is exposed. The IP header is not exposed in IPSec Tunnel mode.

Submitted by saadiq_pk· Mar 4, 2026Security architecture

Question

Options

ATunnel mode
BTransport mode
CAH-only mode
DESP-only mode

How the community answered

(60 responses)

A
82% (49)
B
3% (2)
C
10% (6)
D
5% (3)

Explanation

In both ESP and AH cases with IPSec Transport mode, the IP header is exposed. The IP header is not exposed in IPSec Tunnel mode.

Topics

#IPSec#VPN#tunnel mode#transport mode

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice