Which statement correctly describes encryption concepts for data at rest and data in transit?

Which statement correctly describes encryption concepts for data at rest and data in transit?

• A. Encryption at rest uses TLS/SSL to protect data over networks.
• B. Encryption at rest uses TLS/SSL; in transit uses keys.
• C. Data at rest encryption uses keys to protect stored data; in transit uses TLS/SSL.
• D. Encryption is not used for either data at rest or data in transit.

Answer: (C)

Data protection hinges on the state of the data. Data at rest is protected by encrypting the stored bytes with cryptographic keys, so the data remains unreadable if the storage is accessed without proper authorization. Data in transit is protected by a secure transport protocol, typically TLS/SSL, which establishes an encrypted channel between endpoints and uses keys to keep the transmitted data confidential and tamper-proof. That’s why the correct statement is that data at rest encryption uses keys to protect stored data, while data in transit is protected by TLS/SSL. The other options mix up which mechanism protects each state or claim encryption isn’t used at all.

Data protection hinges on the state of the data. Data at rest is protected by encrypting the stored bytes with cryptographic keys, so the data remains unreadable if the storage is accessed without proper authorization. Data in transit is protected by a secure transport protocol, typically TLS/SSL, which establishes an encrypted channel between endpoints and uses keys to keep the transmitted data confidential and tamper-proof.

That’s why the correct statement is that data at rest encryption uses keys to protect stored data, while data in transit is protected by TLS/SSL. The other options mix up which mechanism protects each state or claim encryption isn’t used at all.