VPN & Tunneling interview questions

24 real VPN & Tunneling questions from the Networking bank, as asked in Indian campus drives and tech interviews. Every question has a verified answer and an AI-tutor explanation on placd — free to start.

1. What is Tunneling?

Junior
  1. A.encapsulating one network protocol's packets inside another for transport across an intermediate network
  2. B.encrypting the entire original IP packet and wrapping it in a new IP header between gateways
  3. C.a remote-access VPN that tunnels traffic over TLS, often through a browser or lightweight client
  4. D.a Cisco design that builds dynamic, on-demand IPsec tunnels between spokes in a hub-and-spoke topology
Reveal the answer + AI explanation — free account

3. Which statement is correct?

Junior
  1. A.Tunneling — encrypting only the payload of an IP packet while leaving the original header intact
  2. B.Tunneling — a remote-access VPN that tunnels traffic over TLS, often through a browser or lightweight client
  3. C.Tunneling — encapsulating one network protocol's packets inside another for transport across an intermediate network
  4. D.Tunneling — encrypting the entire original IP packet and wrapping it in a new IP header between gateways
Reveal the answer + AI explanation — free account

4. What is Split tunneling?

Junior
  1. A.routing only specific traffic through the VPN while the rest goes directly to the Internet
  2. B.a Cisco design that builds dynamic, on-demand IPsec tunnels between spokes in a hub-and-spoke topology
  3. C.a remote-access VPN that tunnels traffic over TLS, often through a browser or lightweight client
  4. D.encrypting the entire original IP packet and wrapping it in a new IP header between gateways
Reveal the answer + AI explanation — free account

6. Which statement is correct?

Junior
  1. A.Split tunneling — encrypting the entire original IP packet and wrapping it in a new IP header between gateways
  2. B.Split tunneling — encrypting only the payload of an IP packet while leaving the original header intact
  3. C.Split tunneling — routing only specific traffic through the VPN while the rest goes directly to the Internet
  4. D.Split tunneling — encapsulating one network protocol's packets inside another for transport across an intermediate network
Reveal the answer + AI explanation — free account

7. What is IPsec tunnel mode?

Mid
  1. A.a modern VPN protocol using fixed cryptographic primitives and a small codebase over UDP
  2. B.encrypting the entire original IP packet and wrapping it in a new IP header between gateways
  3. C.the protocol that negotiates security associations and keys for IPsec tunnels
  4. D.a Cisco design that builds dynamic, on-demand IPsec tunnels between spokes in a hub-and-spoke topology
Reveal the answer + AI explanation — free account

9. Which statement is correct?

Mid
  1. A.IPsec tunnel mode — a Cisco design that builds dynamic, on-demand IPsec tunnels between spokes in a hub-and-spoke topology
  2. B.IPsec tunnel mode — the protocol that negotiates security associations and keys for IPsec tunnels
  3. C.IPsec tunnel mode — encrypting the entire original IP packet and wrapping it in a new IP header between gateways
  4. D.IPsec tunnel mode — a modern VPN protocol using fixed cryptographic primitives and a small codebase over UDP
Reveal the answer + AI explanation — free account

10. What is IPsec transport mode?

Mid
  1. A.routing only specific traffic through the VPN while the rest goes directly to the Internet
  2. B.the protocol that negotiates security associations and keys for IPsec tunnels
  3. C.a modern VPN protocol using fixed cryptographic primitives and a small codebase over UDP
  4. D.encrypting only the payload of an IP packet while leaving the original header intact
Reveal the answer + AI explanation — free account

12. Which statement is correct?

Mid
  1. A.IPsec transport mode — routing only specific traffic through the VPN while the rest goes directly to the Internet
  2. B.IPsec transport mode — encrypting only the payload of an IP packet while leaving the original header intact
  3. C.IPsec transport mode — a remote-access VPN that tunnels traffic over TLS, often through a browser or lightweight client
  4. D.IPsec transport mode — encrypting the entire original IP packet and wrapping it in a new IP header between gateways
Reveal the answer + AI explanation — free account

13. What is IKE (Internet Key Exchange)?

Mid
  1. A.the protocol that negotiates security associations and keys for IPsec tunnels
  2. B.a remote-access VPN that tunnels traffic over TLS, often through a browser or lightweight client
  3. C.encrypting only the payload of an IP packet while leaving the original header intact
  4. D.a modern VPN protocol using fixed cryptographic primitives and a small codebase over UDP
Reveal the answer + AI explanation — free account

15. Which statement is correct?

Mid
  1. A.IKE (Internet Key Exchange) — a modern VPN protocol using fixed cryptographic primitives and a small codebase over UDP
  2. B.IKE (Internet Key Exchange) — the protocol that negotiates security associations and keys for IPsec tunnels
  3. C.IKE (Internet Key Exchange) — a remote-access VPN that tunnels traffic over TLS, often through a browser or lightweight client
  4. D.IKE (Internet Key Exchange) — encapsulating one network protocol's packets inside another for transport across an intermediate network
Reveal the answer + AI explanation — free account

16. What is WireGuard?

Mid
  1. A.encrypting the entire original IP packet and wrapping it in a new IP header between gateways
  2. B.a remote-access VPN that tunnels traffic over TLS, often through a browser or lightweight client
  3. C.a modern VPN protocol using fixed cryptographic primitives and a small codebase over UDP
  4. D.a Cisco design that builds dynamic, on-demand IPsec tunnels between spokes in a hub-and-spoke topology
Reveal the answer + AI explanation — free account

18. Which statement is correct?

Mid
  1. A.WireGuard — encrypting the entire original IP packet and wrapping it in a new IP header between gateways
  2. B.WireGuard — encrypting only the payload of an IP packet while leaving the original header intact
  3. C.WireGuard — a modern VPN protocol using fixed cryptographic primitives and a small codebase over UDP
  4. D.WireGuard — encapsulating one network protocol's packets inside another for transport across an intermediate network
Reveal the answer + AI explanation — free account

19. What is SSL VPN?

Senior
  1. A.a remote-access VPN that tunnels traffic over TLS, often through a browser or lightweight client
  2. B.encrypting only the payload of an IP packet while leaving the original header intact
  3. C.encapsulating one network protocol's packets inside another for transport across an intermediate network
  4. D.a modern VPN protocol using fixed cryptographic primitives and a small codebase over UDP
Reveal the answer + AI explanation — free account

21. Which statement is correct?

Senior
  1. A.SSL VPN — routing only specific traffic through the VPN while the rest goes directly to the Internet
  2. B.SSL VPN — a modern VPN protocol using fixed cryptographic primitives and a small codebase over UDP
  3. C.SSL VPN — a remote-access VPN that tunnels traffic over TLS, often through a browser or lightweight client
  4. D.SSL VPN — encrypting only the payload of an IP packet while leaving the original header intact
Reveal the answer + AI explanation — free account

22. What is DMVPN?

Senior
  1. A.encrypting the entire original IP packet and wrapping it in a new IP header between gateways
  2. B.a modern VPN protocol using fixed cryptographic primitives and a small codebase over UDP
  3. C.a Cisco design that builds dynamic, on-demand IPsec tunnels between spokes in a hub-and-spoke topology
  4. D.a remote-access VPN that tunnels traffic over TLS, often through a browser or lightweight client
Reveal the answer + AI explanation — free account

24. Which statement is correct?

Senior
  1. A.DMVPN — a modern VPN protocol using fixed cryptographic primitives and a small codebase over UDP
  2. B.DMVPN — a Cisco design that builds dynamic, on-demand IPsec tunnels between spokes in a hub-and-spoke topology
  3. C.DMVPN — encapsulating one network protocol's packets inside another for transport across an intermediate network
  4. D.DMVPN — a remote-access VPN that tunnels traffic over TLS, often through a browser or lightweight client
Reveal the answer + AI explanation — free account

Free to start

Answers, AI explanations, and a scored voice mock interview

Sign up free to check your answers with explanations, ask the AI tutor anything on any question, and take one full AI mock interview — scored like a real panel.

Practice VPN & Tunneling free