CISSP Practice Question (Domain 3: Security Architecture and Engineering)

A firm plans to move its enterprise key management service into the same cloud provider hosting its encrypted customer data. The migration eliminates a costly on-premises HSM cluster and satisfies the finance team. What is the security architect's PRIMARY concern?

A. Loss of separation of duties between data and key custody

B. Increased latency affecting cryptographic operation performance

C. Vendor lock-in limiting future portability of encrypted data

D. Reduced ability to demonstrate FIPS validated key storage

(Explain your answer for more points in the comments!)

Come back for the answer tomorrow, or study more now!

16 comments

CISSP Practice Question (Domain 3: Security Architecture and Engineering)