Which of the following statements pertaining to IPSec NOT true?

A.
IPSec can help in protecting networks from some of the IP network attacks.

B.
IPSec provides confidentiality and integrity to information transferred over IP networks through transport
layer encryption and authentication.

C.
IPSec protects against man-in-the-middle attacks.

D.
IPSec protects against spoofing.

Explanation:
IPSec works at the network layer, not at the transport layer.
Incorrect Answers:
A: IPSec protects networks by authenticating and encrypting each IP packet of a communication session.
C: IPSec protects against man-in-the-middle attacks by combining mutual authentication with shared,
cryptography-based keys.
D: IPSec uses cryptography-based keys, shared only by the sending and receiving computers, to create a
cryptographic checksum for each IP packet. The cryptographic checksum ensures that only the computers that
have knowledge of the keys could have sent each packet. This products against spoofing.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 1360