XK0-005 · Question #791
A systems administrator issued the dm-crypt command with no parameters. Which of the following cryptographic features is the systems administrator trying to use?
The correct answer is A. LUKS. The dm-crypt kernel module provides the framework for transparent disk encryption in Linux, with LUKS being the most common and robust method for managing these encrypted volumes at a user level.
Question
A systems administrator issued the dm-crypt command with no parameters. Which of the following cryptographic features is the systems administrator trying to use?
Options
- ALUKS
- BHMAC
- CSHA-256
- DMD5
How the community answered
(41 responses)- A88% (36)
- B7% (3)
- C2% (1)
- D2% (1)
Why each option
The `dm-crypt` kernel module provides the framework for transparent disk encryption in Linux, with LUKS being the most common and robust method for managing these encrypted volumes at a user level.
The `dm-crypt` kernel module enables block device encryption, and LUKS (Linux Unified Key Setup) is the standard on-disk format and management utility built upon `dm-crypt`. When referring to a 'dm-crypt command' in a practical context, it almost invariably implies the use of `cryptsetup` with LUKS to set up and manage encrypted volumes.
HMAC (Hash-based Message Authentication Code) is a cryptographic primitive used for data integrity and authentication, not for full disk encryption itself.
SHA-256 (Secure Hash Algorithm 256-bit) is a cryptographic hash function used within encryption processes, such as for key derivation, but it is not a disk encryption feature or framework.
MD5 (Message-Digest Algorithm 5) is an older cryptographic hash function, largely considered insecure for modern applications requiring strong collision resistance, and it is not a disk encryption feature.
Concept tested: Disk encryption (dm-crypt/LUKS)
Source: https://www.kernel.org/doc/html/latest/admin-guide/device-mapper/dm-crypt.html
Topics
Community Discussion
No community discussion yet for this question.