You work as a Security Manager for Tech Perfect Inc. The management tells you to implement a hashing method in the organization that can resist forgery and is not open to the man-in-the- middle…

The correct answer is C. MAC. MAC (Message Authentication Code) is correct because it combines a cryptographic hash function with a shared secret key, meaning only parties possessing the key can generate or verify the tag - this directly prevents forgery and MITM attacks, since an interceptor cannot modify…

Security Architecture Modeling

Question

You work as a Security Manager for Tech Perfect Inc. The management tells you to implement a hashing method in the organization that can resist forgery and is not open to the man-in-the- middle attack. Which of the following methods will you use to accomplish the task?

Options

AMD
BNTLM
CMAC
DSHA

How the community answered

(23 responses)

A
9% (2)
B
13% (3)
C
74% (17)
D
4% (1)

Explanation

MAC (Message Authentication Code) is correct because it combines a cryptographic hash function with a shared secret key, meaning only parties possessing the key can generate or verify the tag - this directly prevents forgery and MITM attacks, since an interceptor cannot modify a message and produce a valid MAC without knowing the secret key.

MD (Message Digest, e.g., MD5) and SHA are both keyless hash functions - they verify integrity but offer no authentication, so any attacker can recompute a valid hash after tampering with a message. NTLM is a Windows challenge-response authentication protocol, not a data-integrity hashing method, and it carries well-known vulnerabilities anyway.

Memory tip: Think "MAC = Message + A Key" - the key is what separates MAC from plain hashes like MD and SHA, and that key is exactly what blocks forgery and MITM.

Topics

#Message Authentication Code#Cryptographic hashing#MITM resistance#Data integrity

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSAP Practice