Encapsulating traffic inside another protocol to create a private, often encrypted path across an untrusted network.
Practice MCQs for this concept are coming soon.