CompTIA Data+ DA0-002 (V2) Practice Question

Encryption in transit protects data while it is moving across a network. Enabling TLS (HTTPS) on the API gateway creates an encrypted tunnel between the client and server so that PII cannot be intercepted or read in transit. Transparent Data Encryption secures database files at rest only; the traffic that leaves the database server is still plaintext. LZ4 compression reduces payload size but offers no confidentiality. Hashing responses with SHA-256 would render the data unreadable to the client because hashing is one-way and cannot be reversed, so it does not satisfy the requirement to transmit usable-but protected-data. Therefore, requiring TLS 1.3 (or another current TLS version) is the single control that directly fulfills the encryption-in-transit mandate without altering data at rest.