1) On my RPi3B+, (SSH and VNC) are enabled in Config.
2) On my Laptop, (SSH + PuTTY + VNC) are down loaded.
3) I start SSH session via PuTTY per my RPi3B+ Name.
4) I start VNC per my RPi3B+ (Name + Login + PW).
Is the VNC connection protected/Tunneled through SSH by the sequence (1 thru 4) above?