1. Which of the following best describes encryption at rest versus encryption in transit in the cloud?
Protecting data in a cloud environment means handling two distinct states: data stored (at rest) and data moving (in transit). Encryption at rest ensures that if storage media is compromised the data remains unreadable. Encryption in transit ensures that as data moves between services or to/from cloud, it cannot be intercepted and read. Interviewers will expect you to recognise both and know how to implement each in cloud settings.