nerdexam
Isaca

CDPSE · Question #176

Which of the following is the MOST important consideration for determining the operational life of an encryption key?

The correct answer is C. Volume and sensitivity of data protected. The operational life of an encryption key (also called its cryptoperiod) is primarily determined by the volume and sensitivity of the data it protects. A key protecting large volumes of highly sensitive data accumulates greater cryptographic exposure over time, increasing the val

Privacy Architecture

Question

Which of the following is the MOST important consideration for determining the operational life of an encryption key?

Options

  • ANumber of entities involved in communication
  • BNumber of digitally signed documents in force
  • CVolume and sensitivity of data protected
  • DLength of key and complexity of algorithm

How the community answered

(53 responses)
  • A
    15% (8)
  • B
    8% (4)
  • C
    72% (38)
  • D
    6% (3)

Explanation

The operational life of an encryption key (also called its cryptoperiod) is primarily determined by the volume and sensitivity of the data it protects. A key protecting large volumes of highly sensitive data accumulates greater cryptographic exposure over time, increasing the value of a successful attack. The more sensitive the data and the more ciphertext encrypted under a key, the shorter the key's life should be. The number of communicating entities (A) and digitally signed documents (B) are secondary factors. Key length and algorithm complexity (D) affect the key's strength but do not determine how long it should remain in operational use.

Topics

#Encryption key management#Key lifetime#Data sensitivity#Information security risk

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice