Which of the following statements are true regarding the IPsec ESP security transform? (Select all that apply.) a. In tunnel mode, ESP protects the inner IP header and payload. b. In tunnel mode, ESP can provide Data Integrity, Data-Origin Authentication, and Confidentiality. c. ESP Tunnel mode is most often used between IPsec gateways and not the end points of the communication. d. In tunnel mode, ESP protects all the fields of the outer IP header, the ESP header, the inner IP header, and the payload. Which of the following statements are true about Virtual Private Networks (VPN)? (Select all that apply) a. IPsec is not an effective method for building a VPN between two hosts. b. The key updating functions of TLS make it well suited to long-term VPNs between branch offices. c. A VPN can be used to prevent user traffic from being filtered by a firewall. d. IPsec and TLS can both be used to create VPNs without providing confidentiality