A startup is migrating a stand-alone application that stores PII to the cloud. Which of the following should be encrypted?

Encrypting data in transit protects sensitive information, such as PII, from eavesdropping and interception as it travels over networks, especially when migrating to or operating within a cloud environment where data traverses potentially untrusted public internet links. This ensures the confidentiality and integrity of data during its movement between the application, users, and cloud services.

While encrypting data at rest is crucial for PII, the question implies a migration scenario where the movement of data is a primary and immediate concern.

Encrypting data backups is vital for PII, but it addresses data stored in backup media, not the immediate security requirements for data moving during migration or active application use.

Encrypting data archives is important for PII, but like backups, it focuses on long-term storage rather than the real-time protection of data actively in transit during cloud migration or operations.