Which technologies apply to data encryption at rest and data encryption in transit, and why both are important?

• A. Data at rest encryption protects stored data using algorithms like AES, disk encryption; in transit encryption protects data in transit using TLS and IPsec; both reduce exposure
• B. In transit encryption is unnecessary
• C. Data at rest encryption uses TLS
• D. Encryption is not needed if firewalls are present

Answer: (A)

The key idea is protecting data in two separate states: when it is stored (at rest) and when it is moving across networks (in transit). For data at rest, encryption uses algorithms like AES and techniques such as full-disk or file-level encryption to make stored data unreadable if media are stolen or accessed without authorization. For data in transit, encryption relies on protocols like TLS and IPsec to shield data as it travels between systems, preventing eavesdropping and tampering. Both are important because different threats target different moments: you can lose control of physical storage, or an attacker can intercept network traffic. Applying strong encryption in both areas provides defense in depth, dramatically reducing the chance that any exposed data can be read or altered. The other options misstate where encryption belongs or why it’s needed—TLS is for data in transit, not at rest; firewalls do not substitute encryption; and encryption is not merely unnecessary if a firewall exists.