Which three security concerns can be addressed by a tunnel mode IPsec VPN secured by ESP?

Which three security concerns can be addressed by a tunnel mode IPsec VPN secured by ESP?
(Choose three.)

A.
data integrity

B.
data confidentiality

C.
data authentication

D.
outer IP header confidentiality

E.
outer IP header authentication