CISA · Question #486
Which of the following is the MOST important consideration to ensure the integrity of encrypted data?
The correct answer is C. The strength of the encryption algorithm. The strength of the encryption algorithm is the foundational requirement for data integrity. A weak algorithm (e.g., DES, MD5) can be broken regardless of how frequently keys are rotated, how well keys are managed, or how comprehensive the encryption policy is. If the underlying
Question
Which of the following is the MOST important consideration to ensure the integrity of encrypted data?
Options
- AThe frequency of encryption key updates
- BThe accessibility of decryption keys
- CThe strength of the encryption algorithm
- DThe establishment of an encryption policy
How the community answered
(19 responses)- A5% (1)
- B11% (2)
- C79% (15)
- D5% (1)
Explanation
The strength of the encryption algorithm is the foundational requirement for data integrity. A weak algorithm (e.g., DES, MD5) can be broken regardless of how frequently keys are rotated, how well keys are managed, or how comprehensive the encryption policy is. If the underlying algorithm is cryptographically weak, all other controls are rendered ineffective. Strong algorithms like AES-256 ensure that even with imperfect operational practices, the encrypted data remains computationally infeasible to compromise. Key frequency updates (A), key accessibility controls (B), and encryption policies (D) are important supporting controls but are secondary to having a fundamentally sound algorithm.
Topics
Community Discussion
No community discussion yet for this question.