Which devices are responsible for the IPsec encapsulation?

A company is implementing a client-to-site VPN based on tunnel-mode IPsec.

Which devices are responsible for the IPsec encapsulation?
A . Gateways at the remote clients’ locations and devices accessed by the clients at the main site
B . The remote clients and devices accessed by the clients at the main site
C . The remote clients and a gateway at the main site
D . Gateways at the remote clients’ locations and a gateway at the main site

View Answer

Answer: C

Explanation:

In a client-to-site VPN based on tunnel-mode IPsec, the remote clients and a gateway at the main site are responsible for the IPsec encapsulation. The remote clients initiate the VPN connection and encapsulate their traffic in IPsec, which is then decapsulated by the gateway at the main site.