Which statement correctly describes the relationship between AH and ESP in IPsec?

Which statement correctly describes the relationship between AH and ESP in IPsec?

• A. AH Provides Encryption
• B. ESP Provides Encryption
• C. AH Provides Authentication and Integrity; ESP Provides Encryption
• D. AH And ESP Are Interchangeable

Answer: (C)

In IPsec, each protocol has a distinct security role. AH is about verifying that a packet hasn’t been altered and identifying who sent it, so it provides authentication and integrity checks for the whole IP packet, but it does not encrypt the payload. ESP is designed to keep data secret by encrypting the payload, providing confidentiality; it can also offer optional integrity/authentication, but its primary function is encryption. Because one protocol protects integrity and authenticity while the other protects confidentiality, they aren’t interchangeable. That’s why the best description is that AH provides authentication and integrity, while ESP provides encryption.

In IPsec, each protocol has a distinct security role. AH is about verifying that a packet hasn’t been altered and identifying who sent it, so it provides authentication and integrity checks for the whole IP packet, but it does not encrypt the payload. ESP is designed to keep data secret by encrypting the payload, providing confidentiality; it can also offer optional integrity/authentication, but its primary function is encryption. Because one protocol protects integrity and authenticity while the other protects confidentiality, they aren’t interchangeable. That’s why the best description is that AH provides authentication and integrity, while ESP provides encryption.