Which IPsec protocol provides confidentiality in addition to AH's services?

Which IPsec protocol provides confidentiality in addition to AH's services?

• A. DOI
• B. IKE
• C. AH
• D. ESP

Answer: (D)

IPsec offers two main ways to protect packets: AH and ESP. AH provides integrity and authentication for the IP packet, including the header, but it does not encrypt the payload, so there’s no confidentiality. To achieve confidentiality, you use ESP, which encrypts the payload (and can also provide integrity/authentication as needed). That combination lets you protect both the data’s authenticity and its secrecy. IKE is responsible for negotiating keys and security associations, not for providing confidentiality itself. So the protocol that adds confidentiality alongside AH’s services is ESP.

IPsec offers two main ways to protect packets: AH and ESP. AH provides integrity and authentication for the IP packet, including the header, but it does not encrypt the payload, so there’s no confidentiality. To achieve confidentiality, you use ESP, which encrypts the payload (and can also provide integrity/authentication as needed). That combination lets you protect both the data’s authenticity and its secrecy. IKE is responsible for negotiating keys and security associations, not for providing confidentiality itself. So the protocol that adds confidentiality alongside AH’s services is ESP.