CISSP-ISSAP · Question #135
Which of the following is an infrastructure system that allows the secure exchange of data over an unsecured network?
The correct answer is C. PKI. PKI (Public Key Infrastructure) is the correct answer because it is a complete framework - comprising certificate authorities, digital certificates, and key management - that enables secure data exchange over untrusted networks like the internet through asymmetric encryption and
Question
Which of the following is an infrastructure system that allows the secure exchange of data over an unsecured network?
Options
- APMK
- BPTK
- CPKI
- DGTK
How the community answered
(49 responses)- A4% (2)
- B2% (1)
- C94% (46)
Explanation
PKI (Public Key Infrastructure) is the correct answer because it is a complete framework - comprising certificate authorities, digital certificates, and key management - that enables secure data exchange over untrusted networks like the internet through asymmetric encryption and identity verification.
Why the distractors are wrong:
- A. PMK (Pairwise Master Key) - a cryptographic key derived during Wi-Fi authentication (e.g., WPA2); it's a key type, not an infrastructure system.
- B. PTK (Pairwise Transient Key) - derived from the PMK during the 4-way handshake in WPA2; again a session key, not an infrastructure system.
- D. GTK (Group Temporal Key) - used for broadcast/multicast traffic in Wi-Fi networks; also a key type, not an infrastructure system.
Memory tip: The word Infrastructure in "Public Key Infrastructure" maps directly to the question asking for an infrastructure system. PMK, PTK, and GTK all end in "Key" - they are individual keys, not systems. If the question asks for a system or framework, look for the option ending in "Infrastructure."
Topics
Community Discussion
No community discussion yet for this question.