CompTIA Server+ SK0-005 Practice Question
A systems administrator is hardening a new payroll system that houses credit-card data. She enables Transparent Data Encryption (TDE) on the SQL Server 2022 database files and establishes a site-to-site VPN that uses IPsec ESP to encrypt the nightly replication traffic between headquarters and the disaster-recovery site. According to the company's policy, encryption controls must align with the correct paradigm. Which statement correctly maps each control to its encryption paradigm?
TDE protects data at rest, and IPsec protects data in transit.
TDE protects data in transit, and IPsec protects data at rest.
Both TDE and IPsec protect data in transit only.
Both TDE and IPsec protect data at rest only.