A database administrator is configuring an alternate site to replicate the data between the two sites. Which of the following is used to protect against eavesdropping across the network?

A virtual local area network (VLAN) segments network traffic logically but does not inherently encrypt the data packets to protect against eavesdropping.

Data-in-transit encryption protects information as it travels between systems over a network, making it unreadable to unauthorized parties who might intercept the data during replication and thus directly preventing eavesdropping.

An access control list (ACL) manages network traffic flow and access permissions based on rules, but it does not encrypt the content of the data packets.

Data-at-rest encryption protects data while it is stored on a disk or other storage medium but does not secure the data as it is being transmitted across the network.