Your company, Encryptor Corp, is developing a new application that will handle highly sensitive user information. As a cybersecurity specialist, you want to ensure this data is securely stored. The…

Question

Options

• AImplement a block cipher mode of operation.
• Ba digital signature mechanism.
• CSuggest using salt with hashing.
• DSwitch to elliptic curve cryptography.

• A
  17% (4)
• B
  71% (17)
• C
  8% (2)
• D
  4% (1)

Explanation

Digital signatures are the right choice here because they provide data integrity verification - exactly what the question asks for. When data is retrieved, the digital signature can be verified to confirm the data has not been tampered with since it was stored, adding that crucial extra layer of security on top of the hashing and encryption already proposed.

Why the distractors are wrong:

• A (Block cipher mode) relates to how encryption is performed, not to verifying data integrity upon retrieval - it's already implied encryption is in use.
• C (Salt with hashing) strengthens hashing against brute-force/rainbow table attacks, but does not verify data integrity after storage.
• D (Elliptic curve cryptography) is an encryption/key exchange method focused on efficiency, not specifically on integrity verification.

Memory Tip: Think of a digital signature like a wax seal on a letter - it proves who sent it and confirms the contents haven't been changed. Whenever a question mentions "verify integrity upon retrieval," that's your trigger word for digital signatures.

No community discussion yet for this question.