nerdexam
(ISC)2

SSCP · Question #552

Which of the following statements is true about data encryption as a method of protecting data?

The correct answer is D. It requires careful key management. Key management is the most critical operational challenge in any encryption system. If encryption keys are lost, the encrypted data becomes permanently inaccessible. If keys are compromised or stolen, the data is exposed. Keys must be securely generated, stored, distributed…

Submitted by paula_co· Apr 18, 2026Cryptography

Question

Which of the following statements is true about data encryption as a method of protecting data?

Options

  • AIt should sometimes be used for password files
  • BIt is usually easily administered
  • CIt makes few demands on system resources
  • DIt requires careful key management

How the community answered

(31 responses)
  • B
    3% (1)
  • C
    6% (2)
  • D
    90% (28)

Explanation

Key management is the most critical operational challenge in any encryption system. If encryption keys are lost, the encrypted data becomes permanently inaccessible. If keys are compromised or stolen, the data is exposed. Keys must be securely generated, stored, distributed, rotated, and eventually destroyed - all without interrupting access for authorized users. Encryption is not always easy to administer (it adds complexity), it does place demands on system resources (CPU cycles for encryption/decryption), and it should always - not just sometimes - be used for password files (passwords should be hashed, which is a related but distinct concept).

Topics

#Data Encryption#Key Management#Cryptographic Principles#Data Protection

Community Discussion

No community discussion yet for this question.

Full SSCP Practice