Which statement correctly pairs data protection measures with their typical usage?

• A. In transit uses TLS for network transmission; at rest uses encryption keys for stored data.
• B. In transit uses encryption keys for stored data; at rest uses TLS for network transmission.
• C. Both in transit and at rest rely on TLS exclusively.
• D. Only in transit requires encryption; at rest does not require encryption.

Answer: (A)

Data protection depends on whether data is moving or stored. When data is in transit, the aim is to prevent eavesdropping and tampering as it travels across networks, and TLS is the standard way to secure that network transmission. When data is at rest, the goal is to prevent access to stored information, which is achieved by encrypting the data and managing the encryption keys used to decrypt it. So pairing in-transit protection with TLS and at-rest protection with encryption keys for stored data reflects how these protections are applied in practice.

The other notions mix up where TLS and encryption belong, suggesting TLS is used to protect data at rest or that TLS is the sole protection for both states, or that encryption isn’t needed for data at rest. In reality, TLS is designed for securing data in transit, while data at rest relies on encryption with proper key management.