← VCE Data Analytics U4O2

Protecting data in transit

Data moving across a network, such as email or web traffic. It is protected by encrypting it (e.g. HTTPS or a VPN) so intercepted data cannot be read.

Part of: VCE Data Analytics - U4O2 - Cyber Security: Data Security — Module 62, IGCSE Computer Science 0478 — 2.3 Encryption — Module 2, IGCSE Computer Science 0478 — 5.3 Cyber Security — Module 44, ACARA Digital Technologies Years 7–8 — Networks and Cyber Threats — Module 69, ACARA Digital Technologies Years 9–10 — Networked Systems and Access Control — Module 91, QCE Digital Solutions Unit 4 — Digital Methods for Exchanging Data — Module 6, QCE Digital Solutions Unit 4 — Complex Digital Data Exchange Problems and Solution Requirements — Module 49, QCE Digital Solutions Unit 4 — Prototype Digital Data Exchanges — Module 118, WA Computer Science ATAR Year 11 — Cyber Security — Module 91

Understanding Protecting data in transit in VCE Data Analytics U4O2

What it does: The arrow path shows data travelling across a network from sender to receiver, which is data in transit. The data is encrypted before it is sent and decrypted only by the receiver, so an interceptor only sees unreadable ciphertext. Encryption scrambles data while it travels. Locking away storage protects data at rest, not data in transit. Public networks are shared, so attackers on the same network may capture unprotected traffic. HTTPS encrypts the connection. HTTP sends data as plain text that an interceptor can read. Encryption means intercepted data is unreadable without the key. Interception is not prevented, but it is made useless.

Common mistakes: Data moving across a network is in transit, not at rest. The condition should be state = in_transit so the encryption step applies to moving data. HTTP sends data unencrypted, so anyone intercepting it could read it. The connection should be HTTPS, which encrypts data in transit.

Class: _____________________ · Name: _____________________ · Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Protecting data in transit to a class →

This module's key terms are also in a printable crossword (Modules 44–79) and word search (Modules 44–113).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning

Duo

Which of these is an example of data in transit?

A customer database saved on the shop's server hard driveA customer's card details being sent from their browser to an online shop

Matches

Sending a password on cafe Wi-Fi using http://

↓

http:// is not encrypted, so anyone intercepting traffic on the public network can read the password. Use https:// or a VPN.

Applying

Meanings

Term

data in transit

Meaning

Data moving across a network, such as email or web traffic. It is protected by encrypting it (e.g. HTTPS or a VPN) so intercepted data cannot be read.

Practice

data in transit: moving across a network

Testing

Gaps

url = "://shop.example.com/login"

Check Answer

Spots

1state = in_transit

2IF state = at_rest THEN

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy

Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games

Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print

Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Which of these is an example of data in transit?

A. A customer's card details being sent from their browser to an online shop ✓

B. A customer database saved on the shop's server hard drive

Data in transit is data moving across a network. Data saved on a drive is data at rest.

2. What is the main way to protect data in transit?

A. Encrypt it so intercepted data cannot be read ✓

B. Store it on a USB drive in a locked cupboard

Encryption scrambles data while it travels. Locking away storage protects data at rest, not data in transit.

3. A student uses free café Wi-Fi with no password. What is the main risk to their data in transit?

A. The café's printer could delete it

B. Someone on the same network could intercept it ✓

Public networks are shared, so attackers on the same network may capture unprotected traffic.

4. Which web address protects data in transit?

A. http://bank.example.com

B. https://bank.example.com ✓

HTTPS encrypts the connection. HTTP sends data as plain text that an interceptor can read.

5. An attacker intercepts data that was sent over an encrypted connection. What do they see?

A. Scrambled ciphertext that cannot be read without the key ✓

B. The original readable data, because it was intercepted

Encryption means intercepted data is unreadable without the key. Interception is not prevented, but it is made useless.

Match the Pairs

https://bank.com.au → A web address that uses an encrypted connection, so data in transit between browser and server cannot be read if intercepted

VPN → A virtual private network that encrypts all data in transit between a device and a network, even on public Wi-Fi

Data in transit is data moving across a network, such as an email being sent or a web page being loaded → email -> network -> receiver

Encrypting data in transit means intercepted data cannot be read without the key → encrypt(data) -> send -> decrypt(data)

Sending a password on cafe Wi-Fi using http:// → http:// is not encrypted, so anyone intercepting traffic on the public network can read the password. Use https:// or a VPN.

Encrypt files on a USB drive to protect data in transit across the internet → Encrypting stored files protects data at rest, not data in transit. Data moving over a network needs an encrypted connection such as HTTPS or a VPN.

Key Term

data in transit

Data moving across a network, such as email or web traffic. It is protected by encrypting it (e.g. HTTPS or a VPN) so intercepted data cannot be read.

Fill in the Blanks

1. url = "https://shop.example.com/login"

Hint: Type the protocol that encrypts web traffic between browser and server.

2. IF network = "public" THEN connect(VPN) END IF

Hint: Type the tool that wraps your traffic in an encrypted tunnel on untrusted Wi-Fi.

3. message = "Order 123" encrypted = encrypt(message, key) send(encrypted)

Hint: Type the variable holding the scrambled data that should travel over the network.

4. IF padlock = FALSE THEN warnUser() END IF

Hint: Type the keyword that starts a decision in pseudocode.

5. dataInTransit = encrypted attackerCanRead = FALSE

Hint: Type the Boolean value showing whether an interceptor can read the encrypted data.

Spot the Error

Question 1

A state = in_transit

B IF state = at_rest THEN

C ENCRYPT data

D END IF

Line B — Data moving across a network is in transit, not at rest. The condition should be state = in_transit so the encryption step applies to moving data.

Question 2

A data = email_message

B connection = HTTP

C SEND data USING connection

Line B — HTTP sends data unencrypted, so anyone intercepting it could read it. The connection should be HTTPS, which encrypts data in transit.

Question 3

A user = on_public_wifi

B START VPN

C ENCRYPT traffic

D SEND data around VPN tunnel

Line D — Data only gets VPN protection if it is sent through the encrypted tunnel. Sending it around the tunnel leaves it readable. It should say 'through'.

Question 4

A IF wifi = public THEN

B CONNECT VPN

C ENCRYPT data AFTER SEND

D END IF

Line C — Data must be encrypted before it leaves the device. If it is encrypted after sending, it travels across the network readable. It should be BEFORE SEND.

Question 5

A url = input

B IF url STARTS WITH https THEN

C SEND password AS PLAIN TEXT

D ELSE

E WARN user

Line C — When the connection is HTTPS, the password should be sent encrypted. Sending it as plain text would let an interceptor read it. It should be SEND password ENCRYPTED.

Student with a class code? Join your class →