What is Encryption at rest and in transit?

Scrambling data so it is unreadable without a key, while it is stored and while it moves.

In plain English

Data at rest is data in storage, such as a disk, database or backup. Data in transit is data moving across a network. Both need protecting, usually in different ways. In transit, a web connection uses TLS, which you recognise as https. At rest, disks and databases can be encrypted with keys that are managed separately from the data.

Example

Your bank website uses https to protect your details in transit. The bank also encrypts the database holding your account records at rest.

Where you will meet it

This idea belongs to the subject area of these practice tests. We do not publish or predict real exam questions.

• ISC2 CC practice tests
• Cisco CCST Cybersecurity practice tests
• CompTIA Tech+ practice tests

Related terms

• CIA triad: Three goals of information security: confidentiality, integrity and availability.
• Phishing: A scam message that tricks you into giving up a password, money or access.

Written and checked by the Be Ready Education team, last reviewed 2 November 2026. General study information, not professional advice. Providers change names and rules, so confirm details on the official documentation. Not affiliated with, endorsed by or sponsored by any certification vendor or exam body. Certification names, exam codes and product names are trademarks of their respective owners and are used only to identify the exam a practice product prepares for. Our questions are original and are not actual exam questions.