What is the purpose of encryption in transit for data, such as TLS?

• A. To store data securely on disk.
• B. To verify user identities.
• C. To provide end-to-end data loss protection.
• D. To protect data from eavesdropping and tampering while it travels across networks.

Answer: (D)

Encryption in transit is all about protecting data as it moves across networks. TLS creates a secure channel so that anyone who intercepts the data can’t read it (confidentiality) and can’t modify it without detection (integrity), and it also authenticates the communicating parties to prevent impersonation. This is why its main purpose is to shield data from eavesdropping and tampering while it travels.

Storing data on disk is encryption at rest, which is a different scenario. Verifying user identities falls under authentication, which TLS can help with in part (especially with server certificates and optional client certificates), but it’s not the primary goal of encryption in transit. Data loss protection isn’t about securing data in motion; it’s about preventing data loss or exfiltration in other ways.