A parks permit site terminates HTTPS at an Application Load Balancer so browsers talk to the ALB over TLS. What type of encryption control is that primarily illustrating?
Select an answer to reveal the explanation.
Short Explanation
Data flying between the citizen’s browser and the ALB is on the wire — locking that path with TLS is encryption in transit. At-rest controls protect parked data on disks and volumes. Do not confuse the courier pouch with the vault.
Full Explanation
Encryption in transit protects data while it travels across a network path, such as HTTPS/TLS between a browser and an Application Load Balancer. Encryption at rest applies to stored data, which is a different control point. HSM ownership transfer and unmanaged laptop disk encryption are outside this foundational contrast.