CCSK · Question #248
Which of the following should be the main consideration for key management?
The correct answer is B. Performance, accessibility, latency, security. The main considerations for key management are performance, accessibility, latency, and security, ensuring cryptographic keys are available when needed without introducing excessive overhead.
Question
Which of the following should be the main consideration for key management?
Options
- APerformance, access control, latency, non-repudiation
- BPerformance, accessibility, latency, security
- CPerformance, access control, speed,non-repudiation
- DPerformance, availability, speed, security
How the community answered
(52 responses)- A4% (2)
- B79% (41)
- C6% (3)
- D12% (6)
Why each option
The main considerations for key management are performance, accessibility, latency, and security, ensuring cryptographic keys are available when needed without introducing excessive overhead.
Non-repudiation is a goal of digital signatures and PKI, not a core operational consideration for key management infrastructure itself.
Key management systems must perform operations quickly under load (performance), ensure authorized systems can always retrieve keys (accessibility), minimize delays in cryptographic operations (latency), and protect keys from unauthorized disclosure or tampering (security). Accessibility is critical because a key unavailable to an authorized system is effectively the same as a key that does not exist.
Speed and non-repudiation are not the standard framework terms - latency is the precise measure used in key management system evaluation, and non-repudiation is outside the scope of key management operations.
Availability alone is a subset of accessibility, and this option omits the access control and security specifics central to how key management systems are evaluated.
Concept tested: Cryptographic key management operational requirements
Source: https://csrc.nist.gov/publications/detail/sp/800-57-part-1/rev-5/final
Topics
Community Discussion
No community discussion yet for this question.