Which of the following would be of GREATEST concern to an IS auditor observing public key infrastructures (PKIs) deployed in the production business environment?

The correct answer is D. Obsolescence of encryption algorithms. The use of obsolete encryption algorithms poses the greatest risk because it can fundamentally undermine the security of the PKI, making digital certificates and encrypted communications vulnerable to compromise regardless of how well other controls are implemented.

Submitted by tyler.j· Apr 18, 2026Protection of Information Assets

Question

Options

AReuse of digital certificates across devices
BLack of expertise within junior DevSecOps staff
CLimited testing before production release
DObsolescence of encryption algorithms

How the community answered

(36 responses)

A
8% (3)
B
6% (2)
C
25% (9)
D
61% (22)

Explanation

The use of obsolete encryption algorithms poses the greatest risk because it can fundamentally undermine the security of the PKI, making digital certificates and encrypted communications vulnerable to compromise regardless of how well other controls are implemented.

Topics

#PKI#Cryptography#Algorithm Obsolescence#Information Security Auditing

Community Discussion

No community discussion yet for this question.

Full CISA Practice