CAS-003 Question #200: Real Exam Question with Answer & Explanation

The correct answer is B: The user is providing entropy so the application can use random data to create the key pair.. Generating a cryptographically strong key pair requires a large amount of randomness, known as entropy. Computers are deterministic machines and cannot generate truly random numbers on their own; they rely on unpredictable physical events to seed their random number generators (R

Question

When generating a new key pair, a security application asks the user to move the mouse and type random characters on the keyboard. Which of the following BEST describes why this is necessary?

Options

AThe user needs a non-repudiation data source in order for the application to generate the
BThe user is providing entropy so the application can use random data to create the key pair.
CThe user is providing a diffusion point to the application to aid in creating the key pair.
DThe application is requesting perfect forward secrecy from the user in order to create the

Explanation

Generating a cryptographically strong key pair requires a large amount of randomness, known as entropy. Computers are deterministic machines and cannot generate truly random numbers on their own; they rely on unpredictable physical events to seed their random number generators (RNGs). Mouse movements, cursor coordinates, timing between keystrokes, and the characters typed all provide unpredictable, high-entropy input that the application feeds into the RNG to produce a key pair that is computationally infeasible to guess or reproduce. Without sufficient entropy, the key would be weak and potentially predictable. Option A (non-repudiation) and Option D (perfect forward secrecy) are separate cryptographic concepts unrelated to the key generation seeding process. Option C (diffusion point) is not a standard term for this function.

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice