Which statement correctly compares Authentication Header (AH) and Encapsulating Security Payload (ESP)?

### Why this is right\nAH supplies integrity and data-origin authentication but leaves content readable. ESP can encrypt and, when selected, also provide integrity protection.\n\n### The concept\nThese are IPsec protection methods, not TCP or UDP transport protocols. Native AH uses IP protocol 51 and native ESP uses IP protocol 50. ESP's outer IP header is used to route the packet and is outside ESP protection.\n\n### The other options\n- **AH encrypts packet contents, while ESP cannot encrypt.** This reverses their capabilities.\n- **AH and ESP are both transport-layer protocols that use TCP ports.** They are identified as IP protocols, not TCP-port applications.\n- **ESP protects every field in the outer Internet Protocol header.** The outer header remains available for transit routing.\n\n### Remember\nAH detects changes without hiding contents; ESP can hide contents.