Which statement best describes data in use encryption?

• A. Encryption of data during network transmission
• B. Encryption of data while it is being processed
• C. Encryption of data at rest
• D. Hashing data to verify integrity

Answer: (B)

Data in use encryption protects information while it is actively being processed by a computer. This means the data remains protected even as the CPU operates on it, reducing exposure if memory or processors are compromised. Normally, data is decrypted in memory for computation, so protecting it during that moment is the challenging and important goal. Techniques include memory encryption and trusted execution environments or secure enclaves, and in some research areas, computing on encrypted data (homomorphic encryption).

Encryption during network transmission describes data in transit, not while processing. Encryption at rest protects stored data. Hashing for integrity is not encryption at all but a way to verify data has not changed.