CompTIA DataSys+ Practice Exam

The encryption method that provides 'always on' encryption without the need for constant key generation is IPsec. This protocol suite operates at the network layer and is used to secure Internet Protocol (IP) communications by authenticating and encrypting each IP packet in a communication session.

One of the key advantages of IPsec is that it can maintain a persistent secure connection, allowing data to be continuously encrypted without requiring a new encryption key for each session or continually generating keys. This 'always on' aspect makes it particularly effective for securing communications over a VPN and within private networks, where security is crucial, and constant rekeying would be inefficient.

Other options listed, such as SSL and Transport Layer Security (which is the modern version of SSL), primarily secure the data in transit but typically require session-based key exchanges. They involve cryptographic protocols that can necessitate frequent key generation to maintain the security of the sessions, which is not conducive to 'always on' encryption scenarios.

Therefore, IPsec is the most suitable choice for providing continuous encryption without the complications of dynamic key generation.