Which statement correctly defines encryption at rest and in transit?

Which statement correctly defines encryption at rest and in transit?

• A. Only protects data in motion
• B. Protects data stored on disk and during transmission
• C. Only protects data on servers
• D. Encrypts user passwords only

Answer: (B)

Encryption at rest and in transit means protecting data in two contexts: when it is stored on disk and when it is moving across networks. Encryption at rest renders stored data unreadable if the storage medium is accessed without authorization, such as on hard drives, databases, or backups. Encryption in transit protects data as it travels between devices or services, typically using protocols like TLS/HTTPS or VPNs to prevent eavesdropping. The option that mentions both data stored on disk and during transmission best reflects this combined protection. The other statements miss one or both aspects, or focus narrowly on passwords, which is not the full scope of encryption in these states.

Encryption at rest and in transit means protecting data in two contexts: when it is stored on disk and when it is moving across networks. Encryption at rest renders stored data unreadable if the storage medium is accessed without authorization, such as on hard drives, databases, or backups. Encryption in transit protects data as it travels between devices or services, typically using protocols like TLS/HTTPS or VPNs to prevent eavesdropping. The option that mentions both data stored on disk and during transmission best reflects this combined protection. The other statements miss one or both aspects, or focus narrowly on passwords, which is not the full scope of encryption in these states.