File servers encrypt taxpayer data at rest, yet internal APIs send Social Security numbers in cleartext across the city WAN. Which data-protection gap is illustrated?
Select an answer to reveal the explanation.
Short Explanation
Bolting the filing cabinet is great until you shout the contents down a crowded hallway. Encryption at rest does not help SSNs riding clear across the WAN. Cover the data wherever it lives—at rest, in motion, and while applications are using it.
Full Explanation
Comprehensive data protection addresses multiple states: at rest on storage, in transit across networks, and in use within applications and memory. Encrypting only stored files leaves interception and eavesdropping risks on unencrypted API traffic. Asset-security and cryptography programs should align controls to each state based on classification.