StudyToCert

All certifications / Security+ / Lessons

CompTIA Security+ SY0-701 · Domain 3: Security architecture

Data states: at rest, in transit, in use

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Data exists in three states, and each needs different protection. Data at rest is stored: on disks, in databases, in backups, on USB drives and in cloud storage. Data in transit (or in motion) is moving across a network, between a browser and a web server, between data centers or from a phone to a cloud service. Data in use is being actively processed: loaded into memory, displayed on a screen or used by an application's CPU. Security+ expects you to match each state with the controls that fit it, and to spot which state a scenario is describing.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study Security+ for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the Security+ study plan