CCNA: Cisco Certified Network Associate — Question 550

Which IPsec transport mode encrypts the IP header and the payload?

Answer options

• A. pipe
• B. transport
• C. control
• D. tunnel

Correct answer: D

Explanation

The correct answer is D, tunnel mode, which encrypts the entire IP packet, including the header and payload. Options A, B, and C do not provide encryption for the IP header; specifically, transport mode only encrypts the payload, while pipe and control are not standard IPsec modes.