How do site-to-site VPN connections function in Azure when integrated with FortiGate appliances?

How do site-to-site VPN connections function in Azure when integrated with FortiGate appliances?
A . By encrypting data at the application layer
B . Through secure tunnels established between sites
C . By using public internet endpoints exclusively
D . Through API-based configuration updates

Answer: B