During a merger, your company must transmit large archives of personally identifiable information (PII) from a secure on-premises data center to a partner's private cloud over the public Internet. Regulatory requirements mandate that confidentiality and integrity be preserved even if network traffic is intercepted. Which control provides the MOST effective protection for these files while they are in transit between the two environments?
Establish an IPsec VPN or TLS session to encrypt the data during transmission
Mask sensitive fields in the data sets before initiating the transfer
Implement just-in-time (JIT) network access for the destination servers
Restrict transfer pathways to pre-approved subnets using network segmentation
Encrypting the traffic with protocols such as TLS or an IPsec VPN protects confidentiality and integrity by ensuring only authenticated endpoints holding the correct keys can read or modify the data. Network segmentation or just-in-time access reduce the attack surface but do not safeguard packets from interception. Data masking hides values for test or analytics use but offers no cryptographic assurance during transfer. Therefore, encryption in transit is the most effective measure.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is encryption, and how does it protect data in transit?
Open an interactive chat with Bash
How does TLS differ from IPSec for securing data in transit?
Open an interactive chat with Bash
What is the difference between data encryption and data masking?
Open an interactive chat with Bash
ISC2 CISSP
Security Operations
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .