Security+ data at rest, in transit and in use
Stored files are data at rest, network exchanges are data in transit, and values actively processed by an application are data in use. Each state creates different exposure. Disk encryption does not automatically protect a value after an authorized process decrypts it, and TLS does not control every copy later stored by the recipient. Classification helps choose suitable controls and handling rules.
How to read the scenario
Trace the complete data path and identify where plaintext and keys are accessible. Do not assume one control protects every state.
Identify the required outcome, the evidence already provided, and the limits on the technician’s action. Compare every option against those details before deciding. Record why the closest alternative does not meet the stated need.
Original practice example
An organization encrypts files stored on a powered-off backup disk. Which data state is being protected?
- Data in use
- Data in transit
- Data at rest
- Data classification
Show the answer and explanation
Data at rest
Data at rest is stored on media rather than actively transmitted or processed.
Study questions
Which objective does this guide support?
SY0-701, objective 3.3. This independent guide supports original practice and does not replace the full official objectives.
What should I watch for in a scenario?
Trace the complete data path and identify where plaintext and keys are accessible. Do not assume one control protects every state.
Source and version
CompTIA official SY0-701 objectives, objective 3.3. Verified November 5, 2026. This guide targets SY0-701. SY0-801 is expected around November 17, 2026 and is outside this edition.