Which option is an encryption mode supported by IPsec?
- tunnel mode
- bypass mode
- clear mode
- pass-through mode
Explanation: IPsec supports two primary encryption modes: transport mode and tunnel mode. Tunnel mode is considered more secure than transport mode because it encrypts both the packet payload and the original header, creating a new IP header in the process. This mode is commonly used in VPNs to hide unregistered internal IP addresses within the tunneled packet. In contrast, transport mode only encrypts the data portion (payload) of each packet and leaves the original packet header untouched.
Related exam: Modules 17 – 20: Checkpoint Exam: Virtualization and Network Services Answers (CCNP ENCOR v9)
