Which statement describes encryption at rest and in transit?

Which statement describes encryption at rest and in transit?

• A. Encryption protecting data stored on disk (at rest) and during transmission (in transit)
• B. Encryption at rest only
• C. Encryption in transit only
• D. De-identification of data

Answer: (A)

Protecting data requires encryption for both storage and movement. Encryption at rest locks data on disks, servers, or other storage so that if a device is lost or stolen, the information cannot be read. Encryption in transit shields data as it travels over networks, using protocols like TLS or VPNs so that someone intercepting the communication cannot decipher it. The statement that covers both states—encryption for data stored on disk and during transmission—provides comprehensive protection for confidentiality in typical healthcare IT environments. De-identification is a privacy measure, but it isn’t encryption, and it doesn’t replace encrypting data itself in storage or during transfer.

Protecting data requires encryption for both storage and movement. Encryption at rest locks data on disks, servers, or other storage so that if a device is lost or stolen, the information cannot be read. Encryption in transit shields data as it travels over networks, using protocols like TLS or VPNs so that someone intercepting the communication cannot decipher it. The statement that covers both states—encryption for data stored on disk and during transmission—provides comprehensive protection for confidentiality in typical healthcare IT environments. De-identification is a privacy measure, but it isn’t encryption, and it doesn’t replace encrypting data itself in storage or during transfer.