Which protocol protects data in transit?

SY0-701 By islever Editorial Last updated

Short answer

C TLS 1.3

Question

Which of the following would be the most appropriate way to protect data in transit?
  1. SHA-256
  2. SSL3.0
  3. TLS 1.3 Correct Answer
  4. AES-256

Key Takeaways

This question tests the distinction between encryption protocols for data in transit, hashing for integrity, and encryption for data at rest. The common trap is confusing AES-256 (a symmetric cipher used for storage) with TLS (a secure networking protocol).

TLS 1.3 is the most appropriate protocol for protecting data in transit, as it provides encryption, integrity, and authentication. The community consensus strongly favors TLS 1.3 over hashing algorithms, legacy SSL, and symmetric encryption intended for data at rest.

Common mistake: Choosing AES-256, because it is a strong encryption algorithm, but it is for data at rest, not data in transit. AES-256 by itself doesn't protect the communication session; TLS 1.3 uses AES or other ciphers within a secure handshake and key exchange.

Expert Analysis

Why the Answer Is Correct

TLS 1.3 is a modern, widely recommended protocol for securing data in transit. It provides encryption, integrity, and authentication between communicating parties, and it is the foundation for HTTPS and other secure network communications. The community comments agree that TLS is the appropriate choice for protecting data as it moves across networks, with one comment noting 'TLS sounds right... TLS is for data in transit'.

TLS 1.3 also addresses vulnerabilities in older SSL/TLS versions, offering improved security and performance. It is the current standard and the correct answer for this question.

Why the Other Options Are Wrong

A. SHA-256 is a cryptographic hash function used for integrity checks and password storage—not for encrypting data in transit. It does not provide confidentiality or authentication between two parties.

B. SSL 3.0 is an outdated, insecure protocol that has been deprecated due to known vulnerabilities (e.g., POODLE). It should not be used for protecting sensitive data in transit.

D. AES-256 is a symmetric encryption algorithm used for encrypting data at rest (e.g., disk encryption, file encryption). While TLS may use AES as a cipher internally, AES alone does not provide a secure transport protocol.

Community Comment Notes

Comment [2] succinctly summarizes the distinctions: 'SHA256 is a hash, SSL 3.0 is legacy, TLS is for data in transit, AES256 is for data at rest.' This aligns with the correct reasoning.

Comment [1] (ChatGPT) reinforces that TLS 1.3 is the most appropriate protocol, while comment [4] says 'TLS for sure. Easy one.' highlighting the broad agreement.

No comments dispute the answer, and the vote distribution is 100% for option C.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

Memorize the purpose of each technology: hashing for integrity, symmetric encryption for data at rest, and TLS for data in transit. When you see 'data in transit,' immediately think of TLS/DTLS rather than AES or hashing, and reject legacy SSL versions as insecure.

Community Votes

C
100%

100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

  1. 850bc48 👍 7
    Chat GPT:The correct answer is C. TLS 1.3. TLS (Transport Layer Security) 1.3 is the most appropriate protocol for protecting data in transit, as it provides encryption, integrity, and secure authentication between two communicating parties. It is an updated, secure version of SSL/TLS and is widely recommended for secure communication over networks. A. SHA-256 is a hashing algorithm, primarily used for ensuring data integrity, not for encrypting data in transit. B. SSL 3.0 is an outdated and vulnerable protocol that should no longer be used for securing data. D. AES-256 is an encryption algorithm, but it is typically used for data at rest or as part of protocols like TLS for data in transit; by itself, it is not a protocol for securing data in transit.
  2. Syl0 👍 4
    TLS sounds right... SHA256 is a hash SSL 3.0 is fused for HTTPS TLS is for data in transit AES256 is for data at rest
  3. Cee007 👍 1 Answered C
    C. TLS 1.3 Transport Layer Security (TLS) 1.3 is the latest version of the TLS protocol and provides strong encryption for securing data in transit between clients and servers. It offers improved security and performance compared to previous versions like SSL 3.0 and earlier TLS versions.
  4. a4e15bd 👍 2 Answered C
    TLS for sure. Easy one.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide