nerdexam
CSA

CCSK · Question #248

Which of the following should be the main consideration for key management?

The correct answer is B. Performance, accessibility, latency, security. The main considerations for key management are performance, accessibility, latency, and security, ensuring cryptographic keys are available when needed without introducing excessive overhead.

Cloud Data Security

Question

Which of the following should be the main consideration for key management?

Options

  • APerformance, access control, latency, non-repudiation
  • BPerformance, accessibility, latency, security
  • CPerformance, access control, speed,non-repudiation
  • DPerformance, availability, speed, security

How the community answered

(52 responses)
  • A
    4% (2)
  • B
    79% (41)
  • C
    6% (3)
  • D
    12% (6)

Why each option

The main considerations for key management are performance, accessibility, latency, and security, ensuring cryptographic keys are available when needed without introducing excessive overhead.

APerformance, access control, latency, non-repudiation

Non-repudiation is a goal of digital signatures and PKI, not a core operational consideration for key management infrastructure itself.

BPerformance, accessibility, latency, securityCorrect

Key management systems must perform operations quickly under load (performance), ensure authorized systems can always retrieve keys (accessibility), minimize delays in cryptographic operations (latency), and protect keys from unauthorized disclosure or tampering (security). Accessibility is critical because a key unavailable to an authorized system is effectively the same as a key that does not exist.

CPerformance, access control, speed,non-repudiation

Speed and non-repudiation are not the standard framework terms - latency is the precise measure used in key management system evaluation, and non-repudiation is outside the scope of key management operations.

DPerformance, availability, speed, security

Availability alone is a subset of accessibility, and this option omits the access control and security specifics central to how key management systems are evaluated.

Concept tested: Cryptographic key management operational requirements

Source: https://csrc.nist.gov/publications/detail/sp/800-57-part-1/rev-5/final

Topics

#key management#availability#access control#security considerations

Community Discussion

No community discussion yet for this question.

Full CCSK Practice