Which statement correctly describes VPNs, IPsec, and TLS with respect to the layers they secure?

• A. IPsec secures IP packets at the network layer; TLS secures application-layer communications; VPNs provide secure tunnels across networks.
• B. TLS secures application-layer communications; VPNs provide secure tunnel; IPsec secures IP packets at the network layer.
• C. VPNs provide secure tunnels across networks; IPsec secures IP packets at the network layer; TLS secures application-layer communications.
• D. VPNs secure application layer; IPsec secures transport layer; TLS secures data link.

Answer: (C)

Understanding where each technology operates in the protocol stack helps. VPNs are fundamentally about creating a secure tunnel that carries traffic across networks. IPsec works at the IP layer, protecting IP packets as they travel, which is why it’s a natural foundation for network-layer VPNs. TLS sits with the application data, securing the content of communications between end-user applications, such as a web browser talking to a server, by protecting the data in transit at the application level (over a transport protocol like TCP). So the idea that VPNs provide secure tunnels across networks, IPsec secures IP packets at the network layer, and TLS secures application-layer communications aligns best with how these technologies are deployed in practice.