which IPSec mode should you implement?

When security and confidentiality of data within the same LAN is of utmost priority, which IPSec mode should
you implement?

A.
AH Tunnel mode

B.
AH promiscuous

C.
ESP transport mode

D.
ESP confidential