Which statement best describes the protection a Virtual Private Network (VPN) provides?

### Why this is right\nVPN encryption protects traffic while it travels between VPN endpoints. At the receiving endpoint, traffic is decrypted, so endpoint security and access policies remain necessary.\n\n### The concept\nA VPN protects a communication path, not every device or application using that path. Confidentiality hides content in transit, integrity checks detect changes, and authentication verifies the peer or user. These protections do not guarantee safe software or prevent a compromised endpoint from exposing plaintext.\n\n### The other options\n- **It prevents every malware infection on connected devices.** Endpoint protection and patching address malware risk; a VPN does not.\n- **It guarantees that a user's identity and location are anonymous.** VPN authentication identifies users, and a VPN does not promise anonymity.\n- **It replaces security policies at the receiving network.** Policies still determine what decrypted traffic may access.\n\n### Remember\nA VPN protects traffic between endpoints; it does not replace endpoint security or access control.