Which method protects data in transit?

• A. Disk encryption at rest
• B. Hashing for data integrity only
• C. TLS/SSL encryption
• D. Password-based encryption

Answer: (C)

Protecting data in transit means keeping information secure as it moves across a network. TLS/SSL encryption does this by creating a secure, encrypted channel between the two endpoints. Through a handshake, certificates authenticate identities and negotiate encryption parameters, after which session keys encrypt all data in motion. This setup prevents eavesdropping, tampering, and impersonation while the data travels.

Disk encryption at rest protects data when it’s stored on disks, not while it’s being transmitted. Hashing for data integrity checks whether data has been altered but doesn’t conceal the content, so it doesn’t protect confidentiality during transit. Password-based encryption can protect data, but it isn’t the standard mechanism used to secure routine network communications; TLS/SSL is specifically designed for securing data as it moves across networks.