What Are the Main Differences Between ESP and AH in IPsec?

N10-009 By islever Editorial Last updated

Short answer

CD ESP provides confidentiality through the use of encryption. AH provides authentication for IP headers and their payloads.

Question

Which of the following are the main differences between ESP and AH? (Choose two.)
  1. AH provides confidentiality through the use of encryption.
  2. ESP provides authentication for IP headers and their payloads.
  3. ESP provides confidentiality through the use of encryption. Correct Answer
  4. AH provides authentication for IP headers and their payloads. Correct Answer
  5. AH provides data origin authorization over shared secret.

Key Takeaways

This question tests whether you can distinguish the unique roles of ESP and AH: ESP is about confidentiality/encryption, whereas AH is about authentication/integrity of the whole IP packet without encryption.

In IPsec, ESP (Encapsulating Security Payload) provides confidentiality via encryption, while AH (Authentication Header) provides authentication for IP headers and payloads. The exam community confirms that the correct pair is C and D.

Common mistake: Choosing B instead of C or D is a common trap because ESP does provide authentication at the payload level, but unlike AH it does not authenticate the outer IP header. Many candidates also confuse 'authentication' with 'confidentiality' and incorrectly associate encryption with AH.

Expert Analysis

Community Comment Notes

All three community comments agree on answer CD. Comment [1] and [2] succinctly explain: "ESP provides confidentiality through encryption and AH provides authentication through IP headers and their payloads."

Comment [3] highlights a common exam trap: candidates often get stuck between C and D because they fail to read the prompt carefully and realize the question requires choosing two answers. This reinforces the importance of noticing the "Choose two" instruction and verifying that both selected statements are correct.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

For IPsec protocol questions, memorize the core functions: ESP = encryption/confidentiality, AH = authentication/integrity without encryption. Always look for the exact wording — if a statement says 'AH provides confidentiality,' it is automatically false. Also, when the question says 'Choose two,' double-check that your answer includes both of the main distinguishing features rather than a single obvious one.

Community Votes

CD
100%

100% of anonymous learners picked answer CD. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. TDWA2k 👍 3
    ESP provides confidentiality through encryption and AH provides authentication through IP headers and their payloads.
  2. Philco 👍 2
    ESP = provides confidentiality through encryption AH = provides authentication through IP headers and their payloads.
  3. fc040c7 👍 1
    I need to read the question better! I was stuck between C and D until I realized the question asked for two answers. C and D folks

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Why does a moved 2.4GHz WAP cause intermittent laptop issues?

S-grade

How to Reduce Network Congestion and Improve Performance?

S-grade

Why did the telephone system lose connection with a working console and module access?

S-grade

What is the transport layer transmission format for connectionless communication?

S-grade

Practice All N10-009 Questions

Access 100 questions with complete answers and detailed explanations.

View Full N10-009 Practice Test →

← Back to N10-009 Study Guide