Which pair of IPsec services correspond to integrity/origin authentication and confidentiality?

Which pair of IPsec services correspond to integrity/origin authentication and confidentiality?

• A. AH and ESP
• B. IKE and ISAKMP
• C. DOI and Oakley
• D. Fiddler and IDS

Answer: (A)

IPsec protects communications with two main services: integrity/origin authentication and confidentiality. Integrity and origin authentication are provided by the Authentication Header (AH), which ensures the data hasn’t been tampered with and came from the claimed sender. Confidentiality is provided by the Encapsulating Security Payload (ESP), which encrypts the payload to keep it secret. While ESP can also offer integrity in certain configurations, its primary role is confidentiality. The other options refer to key-management or unrelated tools, not the actual IPsec services.

IPsec protects communications with two main services: integrity/origin authentication and confidentiality. Integrity and origin authentication are provided by the Authentication Header (AH), which ensures the data hasn’t been tampered with and came from the claimed sender. Confidentiality is provided by the Encapsulating Security Payload (ESP), which encrypts the payload to keep it secret. While ESP can also offer integrity in certain configurations, its primary role is confidentiality. The other options refer to key-management or unrelated tools, not the actual IPsec services.