Which two are required by IPSec in transport mode? (Choose two.)

IPSec relies on robust cryptographic keys for encryption and authentication, which are typically auto-generated during the IKE (Internet Key Exchange) negotiation process to ensure high security and ephemeral session keys.

NAT Traversal (NAT-T) is an optional feature used to encapsulate IPSec traffic for traversing NAT devices, but it is not a fundamental requirement for IPSec transport mode itself.

While IKEv1 is one protocol option for IPSec key exchange, it is not a strict requirement, as IKEv2 is also widely used and often preferred for its enhancements and efficiency.

A Diffie-Hellman (DH) group, such as DH-group 20 (ECP-384 bits), is a fundamental component of the IKE phase 1 key exchange to establish a shared secret securely, ensuring Perfect Forward Secrecy (PFS) and strong keying material for IPSec.