nerdexam
(ISC)2

CISSP · Question #1273

Which of the following is the MOST significant key management problem due to the number of keys created?

The correct answer is D. Exponential growth when using symmetric keys. Symmetric key cryptography requires a unique key for every pair of communicating parties, causing the number of keys to grow exponentially (n(n-1)/2) as users scale, making key management increasingly unmanageable.

Submitted by neha2k· Mar 5, 2026Security Architecture and Engineering

Question

Which of the following is the MOST significant key management problem due to the number of keys created?

Options

  • AKeys are more difficult to provision and
  • BStorage of the keys require increased security
  • CExponential growth when using asymmetric keys
  • DExponential growth when using symmetric keys

How the community answered

(32 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    9% (3)
  • D
    81% (26)

Why each option

Symmetric key cryptography requires a unique key for every pair of communicating parties, causing the number of keys to grow exponentially (n(n-1)/2) as users scale, making key management increasingly unmanageable.

AKeys are more difficult to provision and

While provisioning difficulty is a real concern, it is a consequence of the exponential key growth problem rather than the root cause or most significant issue itself.

BStorage of the keys require increased security

Increased storage security requirements are a secondary operational concern that stems from having many keys, but it does not represent the foundational key management problem that symmetric encryption creates.

CExponential growth when using asymmetric keys

Asymmetric (public key) cryptography actually scales much more efficiently-each user only needs a key pair (public and private), so n users require only 2n keys, making exponential growth a characteristic of symmetric, not asymmetric, systems.

DExponential growth when using symmetric keysCorrect

In symmetric key cryptography, every pair of communicating parties requires a separate shared secret key, resulting in n(n-1)/2 keys for n users. This quadratic/exponential growth-for example, 10 users need 45 keys, 100 users need 4,950 keys-is the most significant key management problem because provisioning, distributing, storing, and revoking this massive number of keys becomes operationally infeasible at scale.

Concept tested: Symmetric key management scalability and key proliferation

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-overview

Topics

#key management#symmetric encryption#cryptography scaling

Community Discussion

No community discussion yet for this question.

Full CISSP Practice