Which is a valid example of encryption at rest?

Which is a valid example of encryption at rest?

• A. AES full-disk encryption
• B. TLS for data moving over network
• C. TLS for in transit
• D. SSH for remote access encryption

Answer: (A)

Encryption at rest means protecting data that sits on storage devices, so it remains unreadable if the device is off, lost, or stolen. Full-disk encryption accomplishes this by encrypting everything on the disk with a strong algorithm like AES, so any data at rest is protected unless the correct key is used to unlock the device. This is a clear example of encryption at rest, because the protection happens while the data is stored, not while it’s being read or transmitted. The other options describe encryption used during data movement. TLS for data moving over a network and TLS for in transit both guard data as it travels between systems, not when it's stored. SSH for remote access encryption secures the remote session’s communication channel, which is also data in transit.

Encryption at rest means protecting data that sits on storage devices, so it remains unreadable if the device is off, lost, or stolen. Full-disk encryption accomplishes this by encrypting everything on the disk with a strong algorithm like AES, so any data at rest is protected unless the correct key is used to unlock the device. This is a clear example of encryption at rest, because the protection happens while the data is stored, not while it’s being read or transmitted.

The other options describe encryption used during data movement. TLS for data moving over a network and TLS for in transit both guard data as it travels between systems, not when it's stored. SSH for remote access encryption secures the remote session’s communication channel, which is also data in transit.