CISSP Practice Question (Domain 3: Security Architecture and Engineering)

A financial services company needs to share highly sensitive customer transaction data with a third-party analytics provider. The company's legal department mandates that the third-party must be able to perform statistical analysis on the data, but the data must remain encrypted at all times, including while it is being processed by the provider's algorithms to ensure the company never loses control over the plaintext.

What is the MOST appropriate cryptographic solution to meet this requirement?

A. Symmetric encryption using AES-256 with a managed Key Vault

B. Asymmetric encryption using RSA-4096 with Perfect Forward Secrecy

C. Homomorphic encryption

D. Quantum-resistant cryptography

17 comments