CompTIA Data+ DA0-002 (V2) Practice Question

The correct answer is encryption in transit. This practice specifically addresses the protection of data as it moves from one location to another, such as across the internet or a private network. Technologies like TLS (Transport Layer Security) are used to create a secure, encrypted channel to prevent eavesdropping or interception during the transfer, which directly addresses the requirement in the scenario.

• Encryption at rest is incorrect because it applies to data that is stored on a physical or virtual medium, like a hard drive or in a database, not data that is actively moving across a network. While important for securing the data before and after the transfer, it does not protect the data during the transfer.
• Data masking is incorrect as it involves obscuring specific data elements by replacing them with fictitious but realistic-looking data. This is useful for creating non-production datasets for testing or development but does not encrypt the entire dataset to protect it from interception during transmission.
• Role-based access control (RBAC) is an incorrect choice because it is an authorization mechanism that defines who can access specific resources based on their job function. It controls access to the endpoints (the database and the cloud platform) but does not protect the data itself from being intercepted as it travels between those endpoints.