A company wants to protect sensitive information while it is stored and while it moves between systems. Which architecture component most directly addresses this need?

### Why this is right The material specifically identifies encryption as a safeguard for sensitive data at rest and in transit. That directly matches the two states described in the scenario. ### The concept Encryption protects data contents from unauthorized understanding. Access management controls who may use resources, while network segmentation organizes network connections. Those controls can complement encryption but do not replace it. ### The other options - **B. Identity and access management**: It governs user authentication and permissions, not encryption of data contents. - **C. Network segmentation alone**: Segmentation can limit network paths but does not itself encrypt stored or transmitted data. - **D. Performance measurement**: It evaluates effectiveness and does not directly protect data.