Systems Security Certified Practitioner (SSCP) — Question 74

Which of the following is NOT true about IPSec Tunnel mode?

Answer options

• A. Fundamentally an IP tunnel with encryption and authentication
• B. Works at the Transport layer of the OSI model
• C. Have two sets of IP headers
• D. Established for gateway service

Correct answer: B

Explanation

The correct answer is B, as IPSec Tunnel mode operates at the Network layer of the OSI model, not the Transport layer. Options A, C, and D accurately describe characteristics of IPSec Tunnel mode, such as its encryption capabilities, the presence of two IP headers, and its use in establishing secure gateway connections.