A penetration tester discovers a file, key.enc. on a shared drive and then executes the following command, which yields the following output: Which of the following are the best recommendations for th

Question

Exhibit

Options

• AImplementing password management
• BSwitching to using DSA keys
• CUsing stronger encryption for private key files
• DDeleting unencrypted files from the share
• EDisabling the openssl command
• FInitiating key rotation

• A
  73% (44)
• B
  7% (4)
• C
  5% (3)
• D
  13% (8)
• E
  2% (1)

Explanation

Finding an encrypted private key file (key.enc) stored on a shared drive indicates a serious key management failure - the key has likely been exposed to anyone with access to that share, meaning its confidentiality cannot be guaranteed. Initiating key rotation (F) is essential because any key that may have been exposed must be considered compromised and replaced immediately. Implementing password management (A) addresses the root cause: proper key and credential storage policies, access controls, and vaulting practices (such as a secrets manager) would have prevented the key from being stored on a shared drive in the first place. Switching to DSA keys (B) is inadvisable as DSA is older and generally considered weaker than modern RSA or elliptic curve alternatives. Deleting unencrypted files (D) is not directly applicable since key.enc is already encrypted. Disabling the openssl command (E) is not a valid security recommendation.

No community discussion yet for this question.