When a VPN uses IP-in-IP tunneling, what prevents an attacker from reading the header of the original datagram?

A. The encrypted frame is placed in a datagram

B. The datagram is encrypted and placed in a second datagram

C. The frame is encrypted and placed in a second frame

D. The header is encrypted and sent as a separate fragment