What are two examples of the impacts of cryptography on security investigations that an analyst must know? (Choose two.)

Question

Options

• AAttackers can attack the cryptographic algorithms.
• BCryptographic algorithms make it impossible for an attacker to carry out an attack.
• CAttackers can use cryptography to hide their attacks.
• DCryptography does not offer any security against attacks.

• A
  82% (55)
• B
  6% (4)
• D
  12% (8)

Explanation

Two key impacts of cryptography that security analysts must understand are: (A) Attackers can attack the cryptographic algorithms themselves - for example, exploiting weak or outdated algorithms (DES, MD5), implementation flaws, or key management weaknesses to break encryption or forge data; and (C) Attackers can use cryptography to conceal their activities - for example, encrypting malware payloads to evade detection, using encrypted channels (TLS, SSH) for command-and-control, or encrypting exfiltrated data. Option B is false because cryptography does not make attacks impossible; it raises the difficulty but does not eliminate risk. Option D is false because cryptography does provide meaningful security controls when implemented correctly.

No community discussion yet for this question.