Cisco Certified Network Associate (200-301 CCNA) – Question695

When a site-to-site VPN is configured which IPsec mode provides encapsulation and encryption of the entire original IP packet?

A.
IPsec transport mode with AH
B. IPsec tunnel mode with AH
C. IPsec transport mode with ESP
D. IPsec tunnel mode with ESP

Correct Answer: D