Which of the following data protection methods provides confidentiality for data in transit?

De-identification removes or modifies personally identifiable information to protect privacy, but it does not protect the remaining data during transit.

Encryption transforms data into a coded, unreadable format, ensuring that even if intercepted during transit, it remains confidential and inaccessible to unauthorized parties without the proper decryption key. This is a fundamental method for securing data in motion.

Masking replaces sensitive data with structurally similar but inauthentic data, typically for non-production environments, and does not secure data in transit.

Anonymization is a stronger form of de-identification where data cannot be re-identified, but like de-identification, it is about data transformation, not protection during transmission.