nerdexam
CompTIA

CAS-001 · Question #177

Customer Need: "We need the system to produce a series of numbers with no discernible mathematical progression for use by our Java based, PKI-enabled, customer facing website." Which of the…

The correct answer is B. The system shall generate a pseudo-random number upon invocation by the existing Java program. The customer requirement describes numbers with 'no discernible mathematical progression' - this is the definition of pseudo-random output (as opposed to sequential or patterned numbers). The requirement is for a Java-based system to generate these numbers on demand. Option B…

Research and Analysis

Question

Customer Need:

"We need the system to produce a series of numbers with no discernible mathematical progression for use by our Java based, PKI-enabled, customer facing website." Which of the following BEST restates the customer need?

Options

  • AThe system shall use a pseudo-random number generator seeded the same every time.
  • BThe system shall generate a pseudo-random number upon invocation by the existing Java program.
  • CThe system shall generate a truly random number based upon user PKI certificates.
  • DThe system shall implement a pseudo-random number generator for use by corporate customers.

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    71% (24)
  • C
    18% (6)
  • D
    9% (3)

Explanation

The customer requirement describes numbers with 'no discernible mathematical progression' - this is the definition of pseudo-random output (as opposed to sequential or patterned numbers). The requirement is for a Java-based system to generate these numbers on demand. Option B correctly restates this: a pseudo-random number generator invoked by the existing Java program when needed. Option A is incorrect because seeding a PRNG with the same value every time produces the same sequence, which is deterministic and predictable - the opposite of what is needed. Option C incorrectly specifies 'truly random' numbers (which require a hardware entropy source) and incorrectly ties randomness to PKI certificates, which serve authentication not entropy. Option D omits the critical detail that the PRNG must be invoked by the existing Java program and drops the specificity of 'corporate customers' without addressing the actual integration requirement.

Topics

#PRNG#requirements analysis#cryptography#PKI

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice