A company wants to transmit data between its two offices with full…
2025
A company wants to transmit data between its two offices with full confidentiality and integrity. Private IP addresses used by system inside the company should also be confidential. Which of the following IPSec configuration will meet the requirements?
- A.
IPSec using AH in Tunnel mode
- B.
IPSec using ESP in Transport mode
- C.
IPSec using ESP in Tunnel mode
- D.
IPSec using AH in Transport mode
Attempted by 172 students.
Show answer & explanation
Correct answer: C
To meet the requirement for full confidentiality and integrity, IPSec ESP (Encapsulating Security Payload) must be used because AH only provides integrity without encryption. Additionally, hiding private IP addresses requires Tunnel mode since Transport mode leaves the original IP header visible to intermediate routers. Therefore, IPSec using ESP in Tunnel mode is the only configuration that satisfies both confidentiality and privacy constraints for internal IP addresses.