Drag a concept onto its matching description — or click a concept then click the description.
Concepts
Matches
Encryption using AES-256
TLS 1.2+ encryption
Homomorphic or confidential computing
Encryption with separate key management
mediumMatchingObjective-mapped
CCSP Practice Question: Match each data state to its encryption…
Match each data state to its encryption requirement in cloud environments.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data at Rest: Encrypted when stored on disks or SSDs using symmetric encryption like AES-256
Different data states require specific encryption mechanisms; data in use is challenging and requires advanced techniques.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Data at Rest: Encrypted when stored on disks or SSDs using symmetric encryption like AES-256
Why this is correct
Data at rest is stored data that should be encrypted using symmetric algorithms such as AES-256 to protect it from unauthorized access.
- ✓
Data in Transit: Encrypted using protocols like TLS/SSL during transmission over networks
Why this is correct
Data in transit moves across networks and is secured by protocols like TLS/SSL to prevent interception.
- ✓
Data in Use: Protected while being processed, often via homomorphic encryption or trusted execution environments
Why this is correct
Data in use is actively being processed; it requires advanced protection like homomorphic encryption or secure enclaves.
- ✗
Data at Rest: Encrypted only when data is moved
Why it's wrong here
Incorrect; encryption at rest applies when data is stored, not during movement. This describes data in transit.
- ✗
Data in Transit: Protected using access controls on storage
Why it's wrong here
Incorrect; data in transit requires network encryption (e.g., TLS), not storage access controls.
Go deeper
Related to this question
About these practice questions
This CCSP question is part of Courseiva's 964-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.