Which three statements about the IPsec ESP modes of operation are true?

Which three statements about the IPsec ESP modes of operation are true? (Choose three.)

A.
Tunnel mode is used between a host and a security gateway.

B.
Tunnel mode is used between two security gateways.

C.
Tunnel mode only encrypts and authenticates the data.

D.
Transport mode authenticates the IP header.

E.
Transport mode leaves the original IP header in the clear.

Explanation: