Which feature is NOT typically listed as a Network Layer Security (IPSEC) capability in the source material?

• A. Confidentiality
• B. Integrity
• C. Peer authentication
• D. Traffic Analysis Protection

Answer: (D)

IPsec is built around three core security services at the network layer: confidentiality, integrity, and peer authentication. Confidentiality is achieved by encrypting the payload so eavesdroppers can’t read it. Integrity ensures data hasn’t been tampered with and can include authentication of the data, and peer authentication confirms the identities of the communicating endpoints during Security Association setup. Traffic analysis protection, which aims to hide who is talking, when, and how much data is exchanged, is not a standard IPsec capability listed in source material. IPsec focuses on encrypting and protecting the content and verifying its authenticity, not on concealing traffic patterns. So the feature that isn’t typically listed is traffic analysis protection. The other options align with IPsec capabilities: confidentiality through encryption, integrity through integrity checks, and peer authentication during SA establishment.