Which IPsec component provides encryption for VPN traffic and can also provide integrity?

Which IPsec component provides encryption for VPN traffic and can also provide integrity?

• A. AH (Authentication Header)
• B. IKE (Internet Key Exchange)
• C. ESP (Encapsulated Security Payload)
• D. TLS

Answer: (C)

Encapsulated Security Payload provides encryption for VPN traffic, giving confidentiality by encrypting the payload of the IPsec packet. It can also provide integrity by adding an authentication tag, depending on how the SA is configured, which protects against tampering. In contrast, the Authentication Header offers integrity and authentication without encryption, IKE handles negotiating keys and security associations, and TLS is a separate protocol used for securing connections at the transport layer rather than an IPsec feature.

Encapsulated Security Payload provides encryption for VPN traffic, giving confidentiality by encrypting the payload of the IPsec packet. It can also provide integrity by adding an authentication tag, depending on how the SA is configured, which protects against tampering. In contrast, the Authentication Header offers integrity and authentication without encryption, IKE handles negotiating keys and security associations, and TLS is a separate protocol used for securing connections at the transport layer rather than an IPsec feature.