CAS-001 · Question #438
A security architect is locked into a given cryptographic design based on the allowable software at the company. The key length for applications is already fixed as is the cipher and algorithm in…
The correct answer is C. Entropy. Entropy (C) is a measure of randomness or unpredictability in a cryptographic system. Since the key length, cipher, and algorithm are all fixed and cannot be changed, the only remaining lever is the quality of randomness used to generate keys. Well-randomized keys have high…
Question
A security architect is locked into a given cryptographic design based on the allowable software at the company. The key length for applications is already fixed as is the cipher and algorithm in use. The security architect advocates for the use of well-randomized keys as a mitigation to brute force and rainbow attacks. Which of the following is the security architect trying to increase in the design?
Options
- AKey stretching
- BAvailability
- CEntropy
- DRoot of trust
- EIntegrity
How the community answered
(47 responses)- A15% (7)
- B2% (1)
- C72% (34)
- D4% (2)
- E6% (3)
Explanation
Entropy (C) is a measure of randomness or unpredictability in a cryptographic system. Since the key length, cipher, and algorithm are all fixed and cannot be changed, the only remaining lever is the quality of randomness used to generate keys. Well-randomized keys have high entropy - their values are spread more uniformly across the possible keyspace - making them much harder to predict, brute force, or locate in a precomputed rainbow table. Key stretching (A) uses algorithms (like bcrypt or PBKDF2) to make key derivation computationally expensive, which is a different technique not described here. Availability (B) and Integrity (E) are CIA triad concepts unrelated to key randomness. Root of trust (D) refers to a foundational hardware/software anchor for cryptographic operations, not key quality.
Topics
Community Discussion
No community discussion yet for this question.