CAS-001 · Question #470
A security engineer has inherited an authentication project which integrates 1024-bit PKI certificates into the company infrastructure and now has a new requirement to integrate 2048-bit PKI…
The correct answer is C. Maintainability. The MOST serious concern is Maintainability. The project is 25% complete, with 15% of staff already issued 1024-bit certificates. Changing scope to 2048-bit mid-project creates a mixed PKI environment: some users will have 1024-bit certificates while others receive 2048-bit…
Question
A security engineer has inherited an authentication project which integrates 1024-bit PKI certificates into the company infrastructure and now has a new requirement to integrate 2048-bit PKI certificates so that the entire company will be interoperable with its vendors when the project is completed. The project is now 25% complete, with 15% of the company staff being issued 1024-bit certificates. The provisioning of network based accounts has not occurred yet due to other project delays. The project is now expected to be over budget and behind its original schedule. Termination of the existing project and beginning a new project is a consideration because of the change in scope. Which of the following is the security engineer's MOST serious concern with implementing this solution?
Options
- ASuccession planning
- BPerformance
- CMaintainability
- DAvailability
How the community answered
(17 responses)- A6% (1)
- B12% (2)
- C76% (13)
- D6% (1)
Explanation
The MOST serious concern is Maintainability. The project is 25% complete, with 15% of staff already issued 1024-bit certificates. Changing scope to 2048-bit mid-project creates a mixed PKI environment: some users will have 1024-bit certificates while others receive 2048-bit certificates. Supporting two incompatible certificate standards simultaneously - managing their lifecycles, renewals, revocations, and interoperability with vendors - creates a long-term maintenance burden. Availability is not yet an issue since network accounts haven't been provisioned. Performance differences between 1024 and 2048-bit are minimal on modern hardware. Succession planning is unrelated to this technical concern. Maintainability is the core issue because dual-standard PKI environments are complex and costly to sustain.
Topics
Community Discussion
No community discussion yet for this question.