Which statement about encryption for backups is true?

Which statement about encryption for backups is true?

• A. In transit protects data during transfer; at rest protects stored data; both reduce exposure to interception and theft.
• B. Only in transit matters.
• C. Only at rest matters.
• D. Backups should never be encrypted.

Answer: (A)

Encrypting backups protects data in two key phases: while it’s moving to off-site or cloud storage (in transit) and while it’s stored on media or in a storage service (at rest). When data travels over networks, encryption such as TLS helps prevent anyone who might intercept the traffic from reading it. When data is stored, encryption ensures that a stolen drive, tape, or compromised storage service doesn’t expose readable information without the decryption key. Using both protections minimizes risk from eavesdropping during transfer and from physical or logical access to stored backups later. The other ideas fall short because focusing on only one phase leaves the other vulnerable, and the principle of not encrypting backups conflicts with standard security practices.

Encrypting backups protects data in two key phases: while it’s moving to off-site or cloud storage (in transit) and while it’s stored on media or in a storage service (at rest). When data travels over networks, encryption such as TLS helps prevent anyone who might intercept the traffic from reading it. When data is stored, encryption ensures that a stolen drive, tape, or compromised storage service doesn’t expose readable information without the decryption key. Using both protections minimizes risk from eavesdropping during transfer and from physical or logical access to stored backups later. The other ideas fall short because focusing on only one phase leaves the other vulnerable, and the principle of not encrypting backups conflicts with standard security practices.