1Imagine an application running on your VM exchanging data with another application running on the other end of the VPN link. Data from your VM passes logically down through the OSI layers on the sending machine, out over the link between the machines and back up through the OSI layers on the receiving machine. Where in this end-to-end process is the VPN encryption actually protecting the data? Where would an attacker have to target the data to avoid the protection of the VPN?