What Are the Main Differences Between ESP and AH in IPsec?

Which of the following are the main differences between ESP and AH? (Choose two.)

  1. AH provides confidentiality through the use of encryption.
  2. ESP provides authentication for IP headers and their payloads.
  3. ESP provides confidentiality through the use of encryption. Source Reference Answer
  4. AH provides authentication for IP headers and their payloads. Source Reference Answer
  5. AH provides data origin authorization over shared secret.

Community Votes

CD
100%

100% of anonymous learners picked answer CD. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

This question tests whether you can distinguish the unique roles of ESP and AH: ESP is about confidentiality/encryption, whereas AH is about authentication/integrity of the whole IP packet without encryption.

In IPsec, ESP (Encapsulating Security Payload) provides confidentiality via encryption, while AH (Authentication Header) provides authentication for IP headers and payloads. The exam community confirms that the correct pair is C and D.

Choosing B instead of C or D is a common trap because ESP does provide authentication at the payload level, but unlike AH it does not authenticate the outer IP header. Many candidates also confuse 'authentication' with 'confidentiality' and incorrectly associate encryption with AH.

Community Discussion (3 comments)

fc040c7 👍 1 Selected: CD
I need to read the question better! I was stuck between C and D until I realized the question asked for two answers. C and D folks
Philco 👍 2 Selected: CD
ESP = provides confidentiality through encryption AH = provides authentication through IP headers and their payloads.
TDWA2k 👍 3 Selected: CD
ESP provides confidentiality through encryption and AH provides authentication through IP headers and their payloads.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Community Comment Notes

All three community comments agree on answer CD. Comment [1] and [2] succinctly explain: "ESP provides confidentiality through encryption and AH provides authentication through IP headers and their payloads."

Comment [3] highlights a common exam trap: candidates often get stuck between C and D because they fail to read the prompt carefully and realize the question requires choosing two answers. This reinforces the importance of noticing the "Choose two" instruction and verifying that both selected statements are correct.

Official Reference

Exam Strategy

For IPsec protocol questions, memorize the core functions: ESP = encryption/confidentiality, AH = authentication/integrity without encryption. Always look for the exact wording — if a statement says 'AH provides confidentiality,' it is automatically false. Also, when the question says 'Choose two,' double-check that your answer includes both of the main distinguishing features rather than a single obvious one.

Related Analysis

Which of the following is a cost-effective advantage of a sp

A-Grade

A network technician is troubleshooting a web application's

A-Grade

An office is experiencing intermittent connection issues. A

S-Grade

Practice All N10-009 Questions

Access 100 questions with complete answers and detailed explanations.

View Full N10-009 Practice Test →

← Back to N10-009 Study Guide