Question 23
UnclassifiedTransparent data encryption is used for:
Correct answer: D
Explanation
Transparent Data Encryption (TDE) protects database files by encrypting them at rest, including the data and log files on disk. It does not encrypt data in transit or in memory, so the phrase "data and log files at rest" matches its purpose.
Why each option is right or wrong
A. data across communication channels.
B. data currently being processed.
C. data in random access memory (RAM).
D. data and log files at rest
Transparent Data Encryption (TDE) applies encryption at the database file level, so the protected items are the on-disk database and transaction log files while they are stored, not data moving over the network or resident in memory. In SQL Server, for example, TDE is implemented through the Database Encryption Key and protects the .mdf/.ndf data files and .ldf log files at rest, which is exactly what the option describes.