Which IPSec operational mode encrypts the entire data packet (including header and data) into an IPSec
packet?

A.
Authentication mode

B.
Tunnel mode

C.
Transport mode

D.
Safe mode

Explanation:
IPSec can work in one of two modes: transport mode, in which the payload of the message is protected, and
tunnel mode, in which the payload and the routing and header information are protected.
Incorrect Answers:
A: IPsec does not have an Authentication mode
C: In tunnel mode only the payload is protected.
D: IPsec does not have a Safe mode.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 861