Thomas recently established a transport mode IPsec connection between his system and a remote VPN concentrator. Which one of the following statements is correct about this connection?

A. The IP header of the packet is not encrypted.
B. No encryption is in use.
C. The payload of the packet is not encrypted.
D. The connection supports NAT traversal.