Best practices for key management include all of the following, except:

The correct answer is A. Ensure multifactor authentication. Established key management best practices focus specifically on protecting and managing cryptographic keys: passing keys out of band (separately from the data they protect), having key recovery processes in place, and maintaining strict key security (storage, access control…

Submitted by kim_seoul· Apr 18, 2026Cloud Data Security

Question

Options

AEnsure multifactor authentication
BPass keys out of band
CHave key recovery processes
DMaintain key security

How the community answered

(23 responses)

A
96% (22)
B
4% (1)

Explanation

Established key management best practices focus specifically on protecting and managing cryptographic keys: passing keys out of band (separately from the data they protect), having key recovery processes in place, and maintaining strict key security (storage, access control, rotation, expiration). Multifactor authentication is a general identity/access control best practice and is not a key management practice itself. While MFA may be used to secure access to a key management system, it is not a component of the key management lifecycle and does not belong in this category.

Topics

#Key management#Cryptography#Security best practices#Key lifecycle

Community Discussion

No community discussion yet for this question.

Full CCSP Practice