You are designing a connectivity solution between on-premises infrastructure and Amazon VPC. Your server’s on-premises will be communicating with your VPC instances. You will be establishing IPSec tunnels over the internet. You will be using VPN gateways and terminating the IPsec tunnels on AWS-supported customer gateways. Which of the following objectives would you achieve by implementing an IPSec tunnel as outlined above? Choose 4 answers form the options below

Answer options:

A.End-to-end protection of data in transit
B.End-to-end Identity authentication
C.Data encryption across the Internet
D.Protection of data in transit over the Internet
E.Peer identity authentication between VPN gateway and customer gateway
F.Data integrity protection across the Internet

Answer – C,D,E and F
The below link provides an article on the general working of an IPSec tunnel which outlines the advantages of an IPSec tunnel which includes
http://www.firewall.cx/networking-topics/protocols/870-ipsec-modes.html
1) Data encryption across the Internet
2) Protection of data in transit over the Internet
3) Peer identity authentication between source and destination( in aws that is theVPN gateway and customer gateway )
4) Data integrity protection across the Internet