Which statement best describes data in transit encryption?

• A. Hashing data for integrity
• B. Encryption of data at rest
• C. Encryption of data while it is being transmitted over a network
• D. Encryption of data during processing

Answer: (C)

Protecting information as it travels between systems is the idea behind data in transit encryption. When data moves over a network, it can be intercepted or altered. Encrypting the payload during transmission—using protocols like TLS for web traffic or IPsec for network connections—keeps the content unreadable and protected from tampering even if someone can access the network. This focus is different from encryption at rest, which safeguards data stored on disks or backups, and from encryption during processing, which protects data while it’s being used in memory. Hashing, meanwhile, provides integrity checks but isn’t reversible, so it doesn’t protect confidentiality. So the statement that best fits data in transit encryption is about encrypting data while it is being transmitted over a network.