Which of the following protocols that provide integrity and authentication for IPSec, can also provide nonrepudiation in IPSec?

A.
Authentication Header (AH)

B.
Encapsulating Security Payload (ESP)

C.
Secure Sockets Layer (SSL)

D.
Secure Shell (SSH-2)

Explanation:
IPSec is a standard that provides encryption, access control, non-repudiation, and authentication of messages
over an IP.
The two main protocols of IPSec are the Authentication Header (AH) and the Encapsulating Security Payload
(ESP.) The AH provides integrity, authentication, and non-repudiation. An ESP primarily provides encryption,
but it can also provide limited authentication.
Incorrect Answers:
B: ESP provides encryption; it does not provide integrity, authentication or non-repudiation.
C: Secure Sockets Layer (SSL) is not part of IPSec.
D: Secure Shell (SSH-2) is not part of IPSec.

Krutz, Ronald L. and Russel Dean Vines, The CISSP Prep Guide: Mastering the Ten Domains of Computer
Security, John Wiley & Sons, New York, 2001, p. 161