CCSP · Question #808
Cryptographic keys should be secured ________________ .
The correct answer is A. To a level at least as high as the data they can decrypt. This is a foundational principle in cryptography: a key is only as valuable as the data it unlocks. If the key is less protected than the encrypted data, an attacker can simply target the key to gain access to everything the key protects. Therefore, the security controls…
Question
Cryptographic keys should be secured ________________ .
Options
- ATo a level at least as high as the data they can decrypt
- BIn vaults
- CWith two-person integrity
- DBy armed guards
How the community answered
(28 responses)- A89% (25)
- B7% (2)
- C4% (1)
Explanation
This is a foundational principle in cryptography: a key is only as valuable as the data it unlocks. If the key is less protected than the encrypted data, an attacker can simply target the key to gain access to everything the key protects. Therefore, the security controls applied to keys (physical security, access control, audit logging, etc.) must be at least as strong as those applied to the data itself. Options B, C, and D (vaults, two-person integrity, armed guards) may be valid physical controls in specific contexts, but none of them capture the universal guiding principle as precisely as option A.
Topics
Community Discussion
No community discussion yet for this question.