What measures are essential to protect data during transfer?

What measures are essential to protect data during transfer?

• A. Backups and redundancy only
• B. Secure networks, encryption, access controls, and monitoring systems
• C. Physical security of devices
• D. Data classification

Answer: (B)

Protecting data in transit requires a layered approach that secures how data moves, not just how it’s stored. Secure networks ensure the channel itself is protected from eavesdropping or tampering, using protocols like TLS or VPNs to keep transfers confidential and intact. Encryption guarantees that even if data is intercepted, it remains unreadable and unchanged, providing strong confidentiality and integrity for data while it travels. Access controls ensure that only authorized users and systems can initiate or receive transfers, so you can control who can send or receive data and manage credentials and keys. Monitoring systems add a proactive guard, logging transfers, detecting unusual or unauthorized activity, and enabling rapid response if something goes wrong. Backups and redundancy address availability and resilience, not the protection of data while moving. Physical security of devices guards data at rest and the security of endpoints, but doesn’t directly shield data during transmission. Data classification helps determine how sensitive data is and what protections are needed, but it doesn’t by itself provide the protective controls used during transfer.

Protecting data in transit requires a layered approach that secures how data moves, not just how it’s stored. Secure networks ensure the channel itself is protected from eavesdropping or tampering, using protocols like TLS or VPNs to keep transfers confidential and intact. Encryption guarantees that even if data is intercepted, it remains unreadable and unchanged, providing strong confidentiality and integrity for data while it travels. Access controls ensure that only authorized users and systems can initiate or receive transfers, so you can control who can send or receive data and manage credentials and keys. Monitoring systems add a proactive guard, logging transfers, detecting unusual or unauthorized activity, and enabling rapid response if something goes wrong.

Backups and redundancy address availability and resilience, not the protection of data while moving. Physical security of devices guards data at rest and the security of endpoints, but doesn’t directly shield data during transmission. Data classification helps determine how sensitive data is and what protections are needed, but it doesn’t by itself provide the protective controls used during transfer.