Which statement about IPsec is true?

Which statement about IPsec is true?

• A. It provides strong data confidentiality and integrity features, but it can transport only IP traffic
• B. It can transport any protocol
• C. It provides security features but cannot encrypt
• D. It is not used with GRE

Answer: (A)

IPsec works at the IP layer to protect IP packets as they move across a network, providing strong confidentiality (encryption) and integrity/authentication (via AH and ESP). Because it operates on IP packets, it protects traffic that is carried over IP. The payload inside those IP packets can be various upper-layer protocols (like TCP, UDP, ICMP), but non-IP traffic isn’t transported by IPsec on its own—you’d need an additional encapsulation (such as GRE) to carry non-IP traffic securely. So the statement is true because IPsec indeed offers strong encryption and integrity protections, and its scope is IP traffic only.

IPsec works at the IP layer to protect IP packets as they move across a network, providing strong confidentiality (encryption) and integrity/authentication (via AH and ESP). Because it operates on IP packets, it protects traffic that is carried over IP. The payload inside those IP packets can be various upper-layer protocols (like TCP, UDP, ICMP), but non-IP traffic isn’t transported by IPsec on its own—you’d need an additional encapsulation (such as GRE) to carry non-IP traffic securely. So the statement is true because IPsec indeed offers strong encryption and integrity protections, and its scope is IP traffic only.