During the data transfer step in IPSec, which type of payload provides encryption to protect the data?

During the data transfer step in IPSec, which type of payload provides encryption to protect the data?

• A. AH (authentication header) encryption
• B. ESP (Encapsulating Security Payload) encryption
• C. TLS encryption
• D. DES encryption

Answer: (B)

In IPSec, the part that actually encrypts the data being transferred is the Encapsulating Security Payload. It wraps and encrypts the payload so that only the intended recipient with the correct key can read it, providing confidentiality for the data. The authentication header adds integrity and authenticity without encrypting the payload, so it doesn’t protect the content itself. TLS is a separate protocol used outside IPSec, and DES is just an older encryption algorithm, not the IPSec payload type. So the payload that provides encryption of the data is Encapsulating Security Payload.

In IPSec, the part that actually encrypts the data being transferred is the Encapsulating Security Payload. It wraps and encrypts the payload so that only the intended recipient with the correct key can read it, providing confidentiality for the data. The authentication header adds integrity and authenticity without encrypting the payload, so it doesn’t protect the content itself. TLS is a separate protocol used outside IPSec, and DES is just an older encryption algorithm, not the IPSec payload type. So the payload that provides encryption of the data is Encapsulating Security Payload.