A payroll file on a city server is encrypted on disk. Analysts download it across the network in the clear, and a capture shows the contents. Which control is missing?
Select an answer to reveal the explanation.
Short Explanation
The filing cabinet is locked, and the clerk is carrying the folder down a public hallway with the cover open. The lock you are missing is on the trip, encryption in transit. The disk is already encrypted, a lease timer does not scramble a file, and a spare data center does not hide the bytes in the capture.
Full Explanation
Encryption in transit protects data while it crosses a network. The payroll file is encrypted on disk, and a capture of the download still shows the contents, so the missing control is encryption of the transfer. Encryption at rest is already present on the disk. The capture is not reading the disk. It is reading the clear download. A DHCP lease controls how long an address is assigned. It does not encrypt a file transfer. A hot site is a ready recovery facility. It does not encrypt traffic on the city network. Exam caveat: a VPN, TLS, or another tunnel can provide the transit protection. The question asks for the control that is missing, not for one product. Operational check: require the download over TLS or an encrypted transfer tool, capture again, and confirm the payroll contents are no longer readable. Capture the download again and confirm the payroll contents are no longer readable. Prefer TLS or another encrypted transfer, and do not accept a clear download just because the disk copy is encrypted.