nerdexam
CompTIA

XK0-005 · Question #791

A systems administrator issued the dm-crypt command with no parameters. Which of the following cryptographic features is the systems administrator trying to use?

The correct answer is A. LUKS. The dm-crypt kernel module provides the framework for transparent disk encryption in Linux, with LUKS being the most common and robust method for managing these encrypted volumes at a user level.

Security

Question

A systems administrator issued the dm-crypt command with no parameters. Which of the following cryptographic features is the systems administrator trying to use?

Options

  • ALUKS
  • BHMAC
  • CSHA-256
  • DMD5

How the community answered

(41 responses)
  • A
    88% (36)
  • B
    7% (3)
  • C
    2% (1)
  • D
    2% (1)

Why each option

The `dm-crypt` kernel module provides the framework for transparent disk encryption in Linux, with LUKS being the most common and robust method for managing these encrypted volumes at a user level.

ALUKSCorrect

The `dm-crypt` kernel module enables block device encryption, and LUKS (Linux Unified Key Setup) is the standard on-disk format and management utility built upon `dm-crypt`. When referring to a 'dm-crypt command' in a practical context, it almost invariably implies the use of `cryptsetup` with LUKS to set up and manage encrypted volumes.

BHMAC

HMAC (Hash-based Message Authentication Code) is a cryptographic primitive used for data integrity and authentication, not for full disk encryption itself.

CSHA-256

SHA-256 (Secure Hash Algorithm 256-bit) is a cryptographic hash function used within encryption processes, such as for key derivation, but it is not a disk encryption feature or framework.

DMD5

MD5 (Message-Digest Algorithm 5) is an older cryptographic hash function, largely considered insecure for modern applications requiring strong collision resistance, and it is not a disk encryption feature.

Concept tested: Disk encryption (dm-crypt/LUKS)

Source: https://www.kernel.org/doc/html/latest/admin-guide/device-mapper/dm-crypt.html

Topics

#dm-crypt#LUKS#Disk Encryption#Cryptography

Community Discussion

No community discussion yet for this question.

Full XK0-005 Practice