Encryption at rest protects data in which state?

Encryption at rest protects data in which state?

• A. Data stored on disks from unauthorized access
• B. Data in transit over the network
• C. Data during processing
• D. Data replicated to backups

Answer: (A)

Encryption at rest secures data when it is not being used and is stored on storage media. When data sits on disks, tapes, or cloud storage, it remains encrypted at rest, so even if someone gains physical access to the media, they can’t read the content without the keys. This is why data stored on disks is the state described by encryption at rest. It does not apply to data in transit, which is protected by encryption in transit, or to data during processing, which is protected by other mechanisms related to data in use. Backups are also at rest when stored, so encryption at rest would protect those copies as well.

Encryption at rest secures data when it is not being used and is stored on storage media. When data sits on disks, tapes, or cloud storage, it remains encrypted at rest, so even if someone gains physical access to the media, they can’t read the content without the keys. This is why data stored on disks is the state described by encryption at rest. It does not apply to data in transit, which is protected by encryption in transit, or to data during processing, which is protected by other mechanisms related to data in use. Backups are also at rest when stored, so encryption at rest would protect those copies as well.