200-301 Question 139
Single answerA network administrator is tasked with ensuring secure communication between two branch offices over the internet by implementing encryption. They decide to use IPsec for this purpose. Which component of IPsec handles the encryption of data to provide confidentiality?
- A
Authentication Header (AH)
- B
Encapsulating Security Payload (ESP)
- C
Diffie-Hellman Key Exchange
- D
Public Key Infrastructure (PKI)
Show answer and explanation
Correct answer: B
Explanation
Encapsulating Security Payload (ESP) is the IPsec component that provides encryption for data, ensuring confidentiality during transmission. While other options like Authentication Header (AH) focus on integrity and authentication, ESP specifically encrypts the payload, making it the correct choice for this scenario.
- A. Incorrect.
Authentication Header (AH) is a component of IPsec, but it provides data integrity and authentication, not encryption or confidentiality.
- B. Correct.
Encapsulating Security Payload (ESP) is responsible for encrypting data in IPsec, ensuring confidentiality, as well as optionally providing integrity and authentication.
- C. Incorrect.
Diffie-Hellman Key Exchange is a method used to securely exchange cryptographic keys but does not handle data encryption directly.
- D. Incorrect.
Public Key Infrastructure (PKI) is a framework for managing digital certificates and public-key encryption, but it is not a component of IPsec responsible for encryption.