Which statement differentiates data at rest vs data in transit protections?

• A. Data at rest is stored securely using AES or disk encryption, while data in transit is protected during transmission using TLS or IPsec to prevent interception.
• B. Data at rest protection relies on firewalls only, while data in transit uses only VPN.
• C. Data in transit protection relies on encryption at rest, embedded in hardware.
• D. Data at rest and data in transit are protected by the exact same method in all cases.

Answer: (A)

Data at rest protections safeguard stored data from unauthorized access, even if someone gains physical access to the storage device. This is typically done with encryption applied to the stored data, such as disk encryption using AES. Data in transit protections guard data as it moves across networks, preventing interception and tampering by encrypting the data during transmission with protocols like TLS for web traffic or IPsec for network traffic. These are different guardrails because the threats are different: one protects what is stored, the other protects what is moving. The best answer reflects that separation, noting encryption at rest for stored data and encryption in transit for data being transmitted. It doesn’t rely solely on firewalls for stored data, it doesn’t reduce data in transit protection to a single VPN, and it doesn’t claim the same method covers both states in all cases.