nerdexam
(ISC)2

CCSP · Question #808

Cryptographic keys should be secured ________________ .

The correct answer is A. To a level at least as high as the data they can decrypt. This is a foundational principle in cryptography: a key is only as valuable as the data it unlocks. If the key is less protected than the encrypted data, an attacker can simply target the key to gain access to everything the key protects. Therefore, the security controls…

Submitted by ricky.ec· Apr 18, 2026Cloud Data Security

Question

Cryptographic keys should be secured ________________ .

Options

  • ATo a level at least as high as the data they can decrypt
  • BIn vaults
  • CWith two-person integrity
  • DBy armed guards

How the community answered

(28 responses)
  • A
    89% (25)
  • B
    7% (2)
  • C
    4% (1)

Explanation

This is a foundational principle in cryptography: a key is only as valuable as the data it unlocks. If the key is less protected than the encrypted data, an attacker can simply target the key to gain access to everything the key protects. Therefore, the security controls applied to keys (physical security, access control, audit logging, etc.) must be at least as strong as those applied to the data itself. Options B, C, and D (vaults, two-person integrity, armed guards) may be valid physical controls in specific contexts, but none of them capture the universal guiding principle as precisely as option A.

Topics

#Cryptographic keys#Key management#Data security principles#Information protection

Community Discussion

No community discussion yet for this question.

Full CCSP Practice