ISC2 CISSP Cryptography PKI Key Management And Cryptanalytic Attacks Practice Test

 

3 Security Architecture and Engineering • 26 original questions

This CISSP practice test focuses on cryptography pki key management and cryptanalytic attacks through original scenario-based questions aligned to the current ISC2 CISSP Certification Exam Outline. Use the full ExamSnap CISSP collection for practice across all eight domains. For broader exam preparation, review the ISC2 CISSP Exam Dumps page.

Instructions: Select the best answer for each question. Review the explanation after answering; each distractor includes a reason it is not the best choice for that scenario.

Question 1

Trey Research is standardizing security across several business units. The global collaboration platform raises a question about Ciphertext-only attacks. The privacy and compliance lead needs to address the control objective without creating a new single point of failure. Which action provides the BEST governance and security outcome? The architecture contains 50 separately managed trust zones or platform components.

1. Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls.
2. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.
3. Select the security model whose rules match the required confidentiality or integrity objective, and implement the model consistently rather than mixing incompatible assumptions.
4. Deploy a new security product immediately before confirming scope, ownership, or the required security outcome.

Correct answer: A

Why: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. It directly addresses Ciphertext-only attacks without creating a new single point of failure.

Option review:

A: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. It directly addresses Ciphertext-only attacks without creating a new single point of failure.

B: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Ciphertext-only attacks in this scenario.

C: Formal security models express different protection goals; the model must match the property the system is required to preserve. That action can be useful in a different security decision, but it does not most directly address Ciphertext-only attacks in this scenario.

D: A product-first response can add complexity without proving that the actual governance, risk, or control requirement is satisfied. That action can be useful in a different security decision, but it does not most directly address Ciphertext-only attacks in this scenario.

Learning point: Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls. Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials.

Question 2

During a internal audit response, Margie Travel asks the security architect to address Known-plaintext attacks for its e-commerce application. The requirement is to address the control objective while ensuring that emergency access cannot become permanent access. What should the organization do FIRST? The architecture contains 67 separately managed trust zones or platform components.

1. Choose modern cryptography and key-management practices that match the confidentiality, integrity, authentication, and lifecycle requirements, and protect keys as carefully as the data.
2. Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls.
3. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.
4. Grant a small operations group broad administrator access so they can work around the issue whenever it appears.

Correct answer: B

Why: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. It directly addresses Known-plaintext attacks while ensuring that emergency access cannot become permanent access.

Option review:

A: Cryptographic strength depends on algorithms, key management, certificate trust, implementation, and lifecycle controls together. That action can be useful in a different security decision, but it does not most directly address Known-plaintext attacks in this scenario.

B: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. It directly addresses Known-plaintext attacks while ensuring that emergency access cannot become permanent access.

C: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Known-plaintext attacks in this scenario.

D: Broad standing privilege conflicts with least privilege and treats symptoms rather than fixing the underlying control design. That action can be useful in a different security decision, but it does not most directly address Known-plaintext attacks in this scenario.

Learning point: Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls. Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials.

Question 3

Wide World Importers is revising controls for its clinical records environment. A review highlights Frequency analysis. The security operations manager must address the control objective while allowing independent verification of the control outcome. Which action is the BEST next step? The architecture contains 84 separately managed trust zones or platform components.

1. Document the risk as accepted without identifying an accountable risk owner or evaluating residual impact.
2. Select the security model whose rules match the required confidentiality or integrity objective, and implement the model consistently rather than mixing incompatible assumptions.
3. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.
4. Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls.

Correct answer: D

Why: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. It directly addresses Frequency analysis while allowing independent verification of the control outcome.

Option review:

A: Risk acceptance is a business decision that requires informed ownership and cannot substitute for analysis. That action can be useful in a different security decision, but it does not most directly address Frequency analysis in this scenario.

B: Formal security models express different protection goals; the model must match the property the system is required to preserve. That action can be useful in a different security decision, but it does not most directly address Frequency analysis in this scenario.

C: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Frequency analysis in this scenario.

D: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. It directly addresses Frequency analysis while allowing independent verification of the control outcome.

Learning point: Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls. Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials.

Question 4

An auditor asks Bellows University to demonstrate how it handles Chosen-ciphertext attacks in the remote access service. The business continuity lead must address the control objective while accounting for third-party and lifecycle dependencies. Which response is MOST appropriate? The architecture contains 10 separately managed trust zones or platform components.

1. Choose modern cryptography and key-management practices that match the confidentiality, integrity, authentication, and lifecycle requirements, and protect keys as carefully as the data.
2. Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls.
3. Rely on a manual checklist performed during emergencies instead of establishing a repeatable preventive or detective control.
4. Use layered facility, environmental, fire, utility, power, and restricted-area controls to remove single points of physical failure.

Correct answer: B

Why: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. It directly addresses Chosen-ciphertext attacks while accounting for third-party and lifecycle dependencies.

Option review:

A: Cryptographic strength depends on algorithms, key management, certificate trust, implementation, and lifecycle controls together. That action can be useful in a different security decision, but it does not most directly address Chosen-ciphertext attacks in this scenario.

B: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. It directly addresses Chosen-ciphertext attacks while accounting for third-party and lifecycle dependencies.

C: Manual emergency workarounds are fragile and do not provide the consistent assurance required by the scenario. That action can be useful in a different security decision, but it does not most directly address Chosen-ciphertext attacks in this scenario.

D: Data-center security includes environmental resilience and life-safety controls as well as access barriers. That action can be useful in a different security decision, but it does not most directly address Chosen-ciphertext attacks in this scenario.

Learning point: Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls. Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials.

Question 5

After a business change, Litware Services discovers that Implementation attacks is not handled consistently for the customer identity platform. The privacy and compliance lead needs to address the control objective while maintaining the organization’s stated risk appetite. Which recommendation BEST addresses the issue? The architecture contains 27 separately managed trust zones or platform components.

1. Select and place site-security controls from a threat and criticality assessment, considering layered deterrence, detection, delay, and response.
2. Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls.
3. Deploy a new security product immediately before confirming scope, ownership, or the required security outcome.
4. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.

Correct answer: B

Why: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. It directly addresses Implementation attacks while maintaining the organization’s stated risk appetite.

Option review:

A: Facility security is most effective when physical controls are designed as a coordinated system around threats and business criticality. That action can be useful in a different security decision, but it does not most directly address Implementation attacks in this scenario.

B: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. It directly addresses Implementation attacks while maintaining the organization’s stated risk appetite.

C: A product-first response can add complexity without proving that the actual governance, risk, or control requirement is satisfied. That action can be useful in a different security decision, but it does not most directly address Implementation attacks in this scenario.

D: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Implementation attacks in this scenario.

Learning point: Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls. Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials.

Question 6

Humongous Insurance is preparing a security decision for the data analytics lake. The decision involves Side-channel attacks. The security architect must address the control objective while meeting the business objective with the least unnecessary operational complexity. Which option BEST reflects CISSP-level security practice? The architecture contains 44 separately managed trust zones or platform components.

1. Use hardened implementations that reduce observable side channels and resist fault or timing manipulation.
2. Use the platform security capability that establishes the required trust property, such as hardware-backed key protection, memory isolation, or cryptographic enforcement.
3. Grant a small operations group broad administrator access so they can work around the issue whenever it appears.
4. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.

Correct answer: A

Why: Implementation attacks can bypass mathematically strong cryptography by exploiting physical or timing behavior. It directly addresses Side-channel attacks while meeting the business objective with the least unnecessary operational complexity.

Option review:

A: Implementation attacks can bypass mathematically strong cryptography by exploiting physical or timing behavior. It directly addresses Side-channel attacks while meeting the business objective with the least unnecessary operational complexity.

B: Built-in system capabilities can provide stronger trust anchors when they directly support the required security property. That action can be useful in a different security decision, but it does not most directly address Side-channel attacks in this scenario.

C: Broad standing privilege conflicts with least privilege and treats symptoms rather than fixing the underlying control design. That action can be useful in a different security decision, but it does not most directly address Side-channel attacks in this scenario.

D: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Side-channel attacks in this scenario.

Learning point: Use hardened implementations that reduce observable side channels and resist fault or timing manipulation. Implementation attacks can bypass mathematically strong cryptography by exploiting physical or timing behavior.

Question 7

During a risk workshop for the branch-office network, the team identifies Fault injection as the deciding issue. The security operations manager is expected to address the control objective while keeping the control sustainable for normal operations. What is the MOST appropriate course of action? The architecture contains 61 separately managed trust zones or platform components.

1. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.
2. Use hardened implementations that reduce observable side channels and resist fault or timing manipulation.
3. Select and place site-security controls from a threat and criticality assessment, considering layered deterrence, detection, delay, and response.
4. Document the risk as accepted without identifying an accountable risk owner or evaluating residual impact.

Correct answer: B

Why: Implementation attacks can bypass mathematically strong cryptography by exploiting physical or timing behavior. It directly addresses Fault injection while keeping the control sustainable for normal operations.

Option review:

A: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Fault injection in this scenario.

B: Implementation attacks can bypass mathematically strong cryptography by exploiting physical or timing behavior. It directly addresses Fault injection while keeping the control sustainable for normal operations.

C: Facility security is most effective when physical controls are designed as a coordinated system around threats and business criticality. That action can be useful in a different security decision, but it does not most directly address Fault injection in this scenario.

D: Risk acceptance is a business decision that requires informed ownership and cannot substitute for analysis. That action can be useful in a different security decision, but it does not most directly address Fault injection in this scenario.

Learning point: Use hardened implementations that reduce observable side channels and resist fault or timing manipulation. Implementation attacks can bypass mathematically strong cryptography by exploiting physical or timing behavior.

Question 8

A control owner at Relecloud Systems proposes a quick technical fix for Timing attacks in the industrial control network. The business continuity lead must address the control objective while ensuring the decision can be repeated consistently across business units. What should happen FIRST? The architecture contains 78 separately managed trust zones or platform components.

1. Use hardened implementations that reduce observable side channels and resist fault or timing manipulation.
2. Use the platform security capability that establishes the required trust property, such as hardware-backed key protection, memory isolation, or cryptographic enforcement.
3. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.
4. Rely on a manual checklist performed during emergencies instead of establishing a repeatable preventive or detective control.

Correct answer: A

Why: Implementation attacks can bypass mathematically strong cryptography by exploiting physical or timing behavior. It directly addresses Timing attacks while ensuring the decision can be repeated consistently across business units.

Option review:

A: Implementation attacks can bypass mathematically strong cryptography by exploiting physical or timing behavior. It directly addresses Timing attacks while ensuring the decision can be repeated consistently across business units.

B: Built-in system capabilities can provide stronger trust anchors when they directly support the required security property. That action can be useful in a different security decision, but it does not most directly address Timing attacks in this scenario.

C: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Timing attacks in this scenario.

D: Manual emergency workarounds are fragile and do not provide the consistent assurance required by the scenario. That action can be useful in a different security decision, but it does not most directly address Timing attacks in this scenario.

Learning point: Use hardened implementations that reduce observable side channels and resist fault or timing manipulation. Implementation attacks can bypass mathematically strong cryptography by exploiting physical or timing behavior.

Question 9

Contoso Financial is standardizing security across several business units. The research data repository raises a question about Man-in-the-Middle (MITM). The privacy and compliance lead needs to address the control objective while preserving clear accountability and audit evidence. Which action provides the BEST governance and security outcome? The architecture contains 4 separately managed trust zones or platform components.

1. Deploy a new security product immediately before confirming scope, ownership, or the required security outcome.
2. Mutually authenticate endpoints and validate certificates or keys before trusting the encrypted channel.
3. Choose modern cryptography and key-management practices that match the confidentiality, integrity, authentication, and lifecycle requirements, and protect keys as carefully as the data.
4. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.

Correct answer: B

Why: Encryption without authenticated endpoints can still permit a man-in-the-middle attack. It directly addresses Man-in-the-Middle (MITM) while preserving clear accountability and audit evidence.

Option review:

A: A product-first response can add complexity without proving that the actual governance, risk, or control requirement is satisfied. That action can be useful in a different security decision, but it does not most directly address Man-in-the-Middle (MITM) in this scenario.

B: Encryption without authenticated endpoints can still permit a man-in-the-middle attack. It directly addresses Man-in-the-Middle (MITM) while preserving clear accountability and audit evidence.

C: Cryptographic strength depends on algorithms, key management, certificate trust, implementation, and lifecycle controls together. That action can be useful in a different security decision, but it does not most directly address Man-in-the-Middle (MITM) in this scenario.

D: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Man-in-the-Middle (MITM) in this scenario.

Learning point: Mutually authenticate endpoints and validate certificates or keys before trusting the encrypted channel. Encryption without authenticated endpoints can still permit a man-in-the-middle attack.

Question 10

During a identity modernization project, Lucerne Publishing asks the security architect to address Pass-the-hash for its payment processing service. The requirement is to address the control objective while protecting sensitive data throughout the change. What should the organization do FIRST? The architecture contains 21 separately managed trust zones or platform components.

1. Grant a small operations group broad administrator access so they can work around the issue whenever it appears.
2. Derive controls from explicit system security requirements, threat assumptions, and assurance needs before choosing products.
3. Reduce reusable credential material, isolate privileged administration, and use protections that prevent credential hashes from being replayed.
4. Use the platform security capability that establishes the required trust property, such as hardware-backed key protection, memory isolation, or cryptographic enforcement.

Correct answer: C

Why: Pass-the-hash abuses reusable authentication material rather than cracking the underlying password. It directly addresses Pass-the-hash while protecting sensitive data throughout the change.

Option review:

A: Broad standing privilege conflicts with least privilege and treats symptoms rather than fixing the underlying control design. That action can be useful in a different security decision, but it does not most directly address Pass-the-hash in this scenario.

B: Control selection is defensible when it traces to requirements and risk rather than vendor preference. That action can be useful in a different security decision, but it does not most directly address Pass-the-hash in this scenario.

C: Pass-the-hash abuses reusable authentication material rather than cracking the underlying password. It directly addresses Pass-the-hash while protecting sensitive data throughout the change.

D: Built-in system capabilities can provide stronger trust anchors when they directly support the required security property. That action can be useful in a different security decision, but it does not most directly address Pass-the-hash in this scenario.

Learning point: Reduce reusable credential material, isolate privileged administration, and use protections that prevent credential hashes from being replayed. Pass-the-hash abuses reusable authentication material rather than cracking the underlying password.

Question 11

Lamna Healthcare is revising controls for its software delivery pipeline. A review highlights Kerberos exploitation. The security operations manager must address the control objective while preserving availability of the critical business service. Which action is the BEST next step? The architecture contains 38 separately managed trust zones or platform components.

1. Document the risk as accepted without identifying an accountable risk owner or evaluating residual impact.
2. Harden Kerberos accounts and ticket lifetimes, protect privileged credentials, and monitor abnormal ticket use.
3. Use layered facility, environmental, fire, utility, power, and restricted-area controls to remove single points of physical failure.
4. Select the security model whose rules match the required confidentiality or integrity objective, and implement the model consistently rather than mixing incompatible assumptions.

Correct answer: B

Why: Kerberos attacks commonly target ticket or service-account weaknesses rather than the encryption algorithm alone. It directly addresses Kerberos exploitation while preserving availability of the critical business service.

Option review:

A: Risk acceptance is a business decision that requires informed ownership and cannot substitute for analysis. That action can be useful in a different security decision, but it does not most directly address Kerberos exploitation in this scenario.

B: Kerberos attacks commonly target ticket or service-account weaknesses rather than the encryption algorithm alone. It directly addresses Kerberos exploitation while preserving availability of the critical business service.

C: Data-center security includes environmental resilience and life-safety controls as well as access barriers. That action can be useful in a different security decision, but it does not most directly address Kerberos exploitation in this scenario.

D: Formal security models express different protection goals; the model must match the property the system is required to preserve. That action can be useful in a different security decision, but it does not most directly address Kerberos exploitation in this scenario.

Learning point: Harden Kerberos accounts and ticket lifetimes, protect privileged credentials, and monitor abnormal ticket use. Kerberos attacks commonly target ticket or service-account weaknesses rather than the encryption algorithm alone.

Question 12

An auditor asks Fourth Coffee to demonstrate how it handles Ransomware in the AI-assisted customer service platform. The business continuity lead must address the control objective without replacing governance with a technology-only shortcut. Which response is MOST appropriate? The architecture contains 55 separately managed trust zones or platform components.

1. Use layered prevention plus isolated, tested backups and recovery so encryption by an attacker does not become catastrophic.
2. Select the security model whose rules match the required confidentiality or integrity objective, and implement the model consistently rather than mixing incompatible assumptions.
3. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
4. Rely on a manual checklist performed during emergencies instead of establishing a repeatable preventive or detective control.

Correct answer: A

Why: Ransomware resilience requires prevention, detection, containment, and recoverability. It directly addresses Ransomware without replacing governance with a technology-only shortcut.

Option review:

A: Ransomware resilience requires prevention, detection, containment, and recoverability. It directly addresses Ransomware without replacing governance with a technology-only shortcut.

B: Formal security models express different protection goals; the model must match the property the system is required to preserve. That action can be useful in a different security decision, but it does not most directly address Ransomware in this scenario.

C: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. That action can be useful in a different security decision, but it does not most directly address Ransomware in this scenario.

D: Manual emergency workarounds are fragile and do not provide the consistent assurance required by the scenario. That action can be useful in a different security decision, but it does not most directly address Ransomware in this scenario.

Learning point: Use layered prevention plus isolated, tested backups and recovery so encryption by an attacker does not become catastrophic. Ransomware resilience requires prevention, detection, containment, and recoverability.

Question 13

After a business change, Consolidated Messenger discovers that Cryptographic life cycle including keys and algorithm selection is not handled consistently for the global collaboration platform. The privacy and compliance lead needs to address the control objective while keeping the process defensible to auditors and business owners. Which recommendation BEST addresses the issue? The architecture contains 72 separately managed trust zones or platform components.

1. Define key generation, storage, access, rotation, revocation, backup, and destruction as one governed key lifecycle.
2. Integrate security requirements, verification, change control, maintenance, and secure disposal throughout the information-system lifecycle.
3. Deploy a new security product immediately before confirming scope, ownership, or the required security outcome.
4. Use the platform security capability that establishes the required trust property, such as hardware-backed key protection, memory isolation, or cryptographic enforcement.

Correct answer: A

Why: Cryptographic controls fail when key lifecycle practices are weak even if the algorithm is strong. It directly addresses Cryptographic life cycle including keys and algorithm selection while keeping the process defensible to auditors and business owners.

Option review:

A: Cryptographic controls fail when key lifecycle practices are weak even if the algorithm is strong. It directly addresses Cryptographic life cycle including keys and algorithm selection while keeping the process defensible to auditors and business owners.

B: Security decisions must be maintained and revalidated as the system moves from requirements through retirement. That action can be useful in a different security decision, but it does not most directly address Cryptographic life cycle including keys and algorithm selection in this scenario.

C: A product-first response can add complexity without proving that the actual governance, risk, or control requirement is satisfied. That action can be useful in a different security decision, but it does not most directly address Cryptographic life cycle including keys and algorithm selection in this scenario.

D: Built-in system capabilities can provide stronger trust anchors when they directly support the required security property. That action can be useful in a different security decision, but it does not most directly address Cryptographic life cycle including keys and algorithm selection in this scenario.

Learning point: Define key generation, storage, access, rotation, revocation, backup, and destruction as one governed key lifecycle. Cryptographic controls fail when key lifecycle practices are weak even if the algorithm is strong.

Question 14

Proseware Labs is preparing a security decision for the e-commerce application. The decision involves Symmetric cryptography. The security architect must address the control objective while minimizing irreversible action until facts and authority are established. Which option BEST reflects CISSP-level security practice? The architecture contains 89 separately managed trust zones or platform components.

1. Derive controls from explicit system security requirements, threat assumptions, and assurance needs before choosing products.
2. Use a modern symmetric cipher for efficient bulk encryption and protect the shared key with strong key-management controls.
3. Select the security model whose rules match the required confidentiality or integrity objective, and implement the model consistently rather than mixing incompatible assumptions.
4. Grant a small operations group broad administrator access so they can work around the issue whenever it appears.

Correct answer: B

Why: Symmetric encryption is efficient for large data volumes but depends on secure shared-key distribution and protection. It directly addresses Symmetric cryptography while minimizing irreversible action until facts and authority are established.

Option review:

A: Control selection is defensible when it traces to requirements and risk rather than vendor preference. That action can be useful in a different security decision, but it does not most directly address Symmetric cryptography in this scenario.

B: Symmetric encryption is efficient for large data volumes but depends on secure shared-key distribution and protection. It directly addresses Symmetric cryptography while minimizing irreversible action until facts and authority are established.

C: Formal security models express different protection goals; the model must match the property the system is required to preserve. That action can be useful in a different security decision, but it does not most directly address Symmetric cryptography in this scenario.

D: Broad standing privilege conflicts with least privilege and treats symptoms rather than fixing the underlying control design. That action can be useful in a different security decision, but it does not most directly address Symmetric cryptography in this scenario.

Learning point: Use a modern symmetric cipher for efficient bulk encryption and protect the shared key with strong key-management controls. Symmetric encryption is efficient for large data volumes but depends on secure shared-key distribution and protection.

Question 15

During a risk workshop for the clinical records environment, the team identifies Asymmetric cryptography as the deciding issue. The security operations manager is expected to address the control objective while preserving evidence needed for later review. What is the MOST appropriate course of action? The architecture contains 15 separately managed trust zones or platform components.

1. Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls.
2. Document the risk as accepted without identifying an accountable risk owner or evaluating residual impact.
3. Use layered facility, environmental, fire, utility, power, and restricted-area controls to remove single points of physical failure.
4. Use a modern symmetric cipher for efficient bulk encryption and protect the shared key with strong key-management controls.

Correct answer: D

Why: Symmetric encryption is efficient for large data volumes but depends on secure shared-key distribution and protection. It directly addresses Asymmetric cryptography while preserving evidence needed for later review.

Option review:

A: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. That action can be useful in a different security decision, but it does not most directly address Asymmetric cryptography in this scenario.

B: Risk acceptance is a business decision that requires informed ownership and cannot substitute for analysis. That action can be useful in a different security decision, but it does not most directly address Asymmetric cryptography in this scenario.

C: Data-center security includes environmental resilience and life-safety controls as well as access barriers. That action can be useful in a different security decision, but it does not most directly address Asymmetric cryptography in this scenario.

D: Symmetric encryption is efficient for large data volumes but depends on secure shared-key distribution and protection. It directly addresses Asymmetric cryptography while preserving evidence needed for later review.

Learning point: Use a modern symmetric cipher for efficient bulk encryption and protect the shared key with strong key-management controls. Symmetric encryption is efficient for large data volumes but depends on secure shared-key distribution and protection.

Question 16

A control owner at Adventure Works proposes a quick technical fix for Cryptographic life cycle including keys and algorithm selection in the remote access service. The business continuity lead must address the control objective without granting broader privilege than the business need requires. What should happen FIRST? The architecture contains 32 separately managed trust zones or platform components.

1. Define key generation, storage, access, rotation, revocation, backup, and destruction as one governed key lifecycle.
2. Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls.
3. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.
4. Rely on a manual checklist performed during emergencies instead of establishing a repeatable preventive or detective control.

Correct answer: A

Why: Cryptographic controls fail when key lifecycle practices are weak even if the algorithm is strong. It directly addresses Cryptographic life cycle including keys and algorithm selection without granting broader privilege than the business need requires.

Option review:

A: Cryptographic controls fail when key lifecycle practices are weak even if the algorithm is strong. It directly addresses Cryptographic life cycle including keys and algorithm selection without granting broader privilege than the business need requires.

B: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. That action can be useful in a different security decision, but it does not most directly address Cryptographic life cycle including keys and algorithm selection in this scenario.

C: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Cryptographic life cycle including keys and algorithm selection in this scenario.

D: Manual emergency workarounds are fragile and do not provide the consistent assurance required by the scenario. That action can be useful in a different security decision, but it does not most directly address Cryptographic life cycle including keys and algorithm selection in this scenario.

Learning point: Define key generation, storage, access, rotation, revocation, backup, and destruction as one governed key lifecycle. Cryptographic controls fail when key lifecycle practices are weak even if the algorithm is strong.

Question 17

VanArsdel Energy is standardizing security across several business units. The customer identity platform raises a question about Symmetric cryptography. The privacy and compliance lead needs to address the control objective without creating a new single point of failure. Which action provides the BEST governance and security outcome? The architecture contains 49 separately managed trust zones or platform components.

1. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.
2. Use a modern symmetric cipher for efficient bulk encryption and protect the shared key with strong key-management controls.
3. Select and place site-security controls from a threat and criticality assessment, considering layered deterrence, detection, delay, and response.
4. Deploy a new security product immediately before confirming scope, ownership, or the required security outcome.

Correct answer: B

Why: Symmetric encryption is efficient for large data volumes but depends on secure shared-key distribution and protection. It directly addresses Symmetric cryptography without creating a new single point of failure.

Option review:

A: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Symmetric cryptography in this scenario.

B: Symmetric encryption is efficient for large data volumes but depends on secure shared-key distribution and protection. It directly addresses Symmetric cryptography without creating a new single point of failure.

C: Facility security is most effective when physical controls are designed as a coordinated system around threats and business criticality. That action can be useful in a different security decision, but it does not most directly address Symmetric cryptography in this scenario.

D: A product-first response can add complexity without proving that the actual governance, risk, or control requirement is satisfied. That action can be useful in a different security decision, but it does not most directly address Symmetric cryptography in this scenario.

Learning point: Use a modern symmetric cipher for efficient bulk encryption and protect the shared key with strong key-management controls. Symmetric encryption is efficient for large data volumes but depends on secure shared-key distribution and protection.

Question 18

During a architecture design review, Northwind Health asks the security architect to address Asymmetric cryptography for its data analytics lake. The requirement is to address the control objective while ensuring that emergency access cannot become permanent access. What should the organization do FIRST? The architecture contains 66 separately managed trust zones or platform components.

1. Grant a small operations group broad administrator access so they can work around the issue whenever it appears.
2. Use the platform security capability that establishes the required trust property, such as hardware-backed key protection, memory isolation, or cryptographic enforcement.
3. Use a modern symmetric cipher for efficient bulk encryption and protect the shared key with strong key-management controls.
4. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.

Correct answer: C

Why: Symmetric encryption is efficient for large data volumes but depends on secure shared-key distribution and protection. It directly addresses Asymmetric cryptography while ensuring that emergency access cannot become permanent access.

Option review:

A: Broad standing privilege conflicts with least privilege and treats symptoms rather than fixing the underlying control design. That action can be useful in a different security decision, but it does not most directly address Asymmetric cryptography in this scenario.

B: Built-in system capabilities can provide stronger trust anchors when they directly support the required security property. That action can be useful in a different security decision, but it does not most directly address Asymmetric cryptography in this scenario.

C: Symmetric encryption is efficient for large data volumes but depends on secure shared-key distribution and protection. It directly addresses Asymmetric cryptography while ensuring that emergency access cannot become permanent access.

D: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Asymmetric cryptography in this scenario.

Learning point: Use a modern symmetric cipher for efficient bulk encryption and protect the shared key with strong key-management controls. Symmetric encryption is efficient for large data volumes but depends on secure shared-key distribution and protection.

Question 19

Coho Insurance is revising controls for its branch-office network. A review highlights Elliptic-curve cryptography. The security operations manager must address the control objective while allowing independent verification of the control outcome. Which action is the BEST next step? The architecture contains 83 separately managed trust zones or platform components.

1. Derive controls from explicit system security requirements, threat assumptions, and assurance needs before choosing products.
2. Document the risk as accepted without identifying an accountable risk owner or evaluating residual impact.
3. Select and place site-security controls from a threat and criticality assessment, considering layered deterrence, detection, delay, and response.
4. Use public-key cryptography for the authentication, key-establishment, or signature need, with trusted key validation.

Correct answer: D

Why: Asymmetric cryptography separates public and private keys and supports signatures and scalable trust relationships. It directly addresses Elliptic-curve cryptography while allowing independent verification of the control outcome.

Option review:

A: Control selection is defensible when it traces to requirements and risk rather than vendor preference. That action can be useful in a different security decision, but it does not most directly address Elliptic-curve cryptography in this scenario.

B: Risk acceptance is a business decision that requires informed ownership and cannot substitute for analysis. That action can be useful in a different security decision, but it does not most directly address Elliptic-curve cryptography in this scenario.

C: Facility security is most effective when physical controls are designed as a coordinated system around threats and business criticality. That action can be useful in a different security decision, but it does not most directly address Elliptic-curve cryptography in this scenario.

D: Asymmetric cryptography separates public and private keys and supports signatures and scalable trust relationships. It directly addresses Elliptic-curve cryptography while allowing independent verification of the control outcome.

Learning point: Use public-key cryptography for the authentication, key-establishment, or signature need, with trusted key validation. Asymmetric cryptography separates public and private keys and supports signatures and scalable trust relationships.

Question 20

An auditor asks A. Datum Analytics to demonstrate how it handles Quantum-related cryptographic considerations in the industrial control network. The business continuity lead must address the control objective while accounting for third-party and lifecycle dependencies. Which response is MOST appropriate? The architecture contains 9 separately managed trust zones or platform components.

1. Rely on a manual checklist performed during emergencies instead of establishing a repeatable preventive or detective control.
2. Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls.
3. Choose modern cryptography and key-management practices that match the confidentiality, integrity, authentication, and lifecycle requirements, and protect keys as carefully as the data.
4. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.

Correct answer: C

Why: Cryptographic strength depends on algorithms, key management, certificate trust, implementation, and lifecycle controls together. It directly addresses Quantum-related cryptographic considerations while accounting for third-party and lifecycle dependencies.

Option review:

A: Manual emergency workarounds are fragile and do not provide the consistent assurance required by the scenario. That action can be useful in a different security decision, but it does not most directly address Quantum-related cryptographic considerations in this scenario.

B: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. That action can be useful in a different security decision, but it does not most directly address Quantum-related cryptographic considerations in this scenario.

C: Cryptographic strength depends on algorithms, key management, certificate trust, implementation, and lifecycle controls together. It directly addresses Quantum-related cryptographic considerations while accounting for third-party and lifecycle dependencies.

D: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. That action can be useful in a different security decision, but it does not most directly address Quantum-related cryptographic considerations in this scenario.

Learning point: Choose modern cryptography and key-management practices that match the confidentiality, integrity, authentication, and lifecycle requirements, and protect keys as carefully as the data. Cryptographic strength depends on algorithms, key management, certificate trust, implementation, and lifecycle controls together.

Question 21

After a business change, Blue Yonder Airlines discovers that Public Key Infrastructure (PKI) is not handled consistently for the research data repository. The privacy and compliance lead needs to address the control objective while maintaining the organization’s stated risk appetite. Which recommendation BEST addresses the issue? The architecture contains 26 separately managed trust zones or platform components.

1. Use a managed PKI trust chain and digital signatures with certificate validation, revocation handling, and protected private keys.
2. Deploy a new security product immediately before confirming scope, ownership, or the required security outcome.
3. Use the platform security capability that establishes the required trust property, such as hardware-backed key protection, memory isolation, or cryptographic enforcement.
4. Derive controls from explicit system security requirements, threat assumptions, and assurance needs before choosing products.

Correct answer: A

Why: PKI and digital signatures provide scalable authentication, integrity, and nonrepudiation only when trust and key lifecycle are managed. It directly addresses Public Key Infrastructure (PKI) while maintaining the organization’s stated risk appetite.

Option review:

A: PKI and digital signatures provide scalable authentication, integrity, and nonrepudiation only when trust and key lifecycle are managed. It directly addresses Public Key Infrastructure (PKI) while maintaining the organization’s stated risk appetite.

B: A product-first response can add complexity without proving that the actual governance, risk, or control requirement is satisfied. That action can be useful in a different security decision, but it does not most directly address Public Key Infrastructure (PKI) in this scenario.

C: Built-in system capabilities can provide stronger trust anchors when they directly support the required security property. That action can be useful in a different security decision, but it does not most directly address Public Key Infrastructure (PKI) in this scenario.

D: Control selection is defensible when it traces to requirements and risk rather than vendor preference. That action can be useful in a different security decision, but it does not most directly address Public Key Infrastructure (PKI) in this scenario.

Learning point: Use a managed PKI trust chain and digital signatures with certificate validation, revocation handling, and protected private keys. PKI and digital signatures provide scalable authentication, integrity, and nonrepudiation only when trust and key lifecycle are managed.

Question 22

City Power is preparing a security decision for the payment processing service. The decision involves Quantum key distribution concepts. The security architect must address the control objective while meeting the business objective with the least unnecessary operational complexity. Which option BEST reflects CISSP-level security practice? The architecture contains 43 separately managed trust zones or platform components.

1. Select the security model whose rules match the required confidentiality or integrity objective, and implement the model consistently rather than mixing incompatible assumptions.
2. Grant a small operations group broad administrator access so they can work around the issue whenever it appears.
3. Use the platform security capability that establishes the required trust property, such as hardware-backed key protection, memory isolation, or cryptographic enforcement.
4. Choose modern cryptography and key-management practices that match the confidentiality, integrity, authentication, and lifecycle requirements, and protect keys as carefully as the data.

Correct answer: D

Why: Cryptographic strength depends on algorithms, key management, certificate trust, implementation, and lifecycle controls together. It directly addresses Quantum key distribution concepts while meeting the business objective with the least unnecessary operational complexity.

Option review:

A: Formal security models express different protection goals; the model must match the property the system is required to preserve. That action can be useful in a different security decision, but it does not most directly address Quantum key distribution concepts in this scenario.

B: Broad standing privilege conflicts with least privilege and treats symptoms rather than fixing the underlying control design. That action can be useful in a different security decision, but it does not most directly address Quantum key distribution concepts in this scenario.

C: Built-in system capabilities can provide stronger trust anchors when they directly support the required security property. That action can be useful in a different security decision, but it does not most directly address Quantum key distribution concepts in this scenario.

D: Cryptographic strength depends on algorithms, key management, certificate trust, implementation, and lifecycle controls together. It directly addresses Quantum key distribution concepts while meeting the business objective with the least unnecessary operational complexity.

Learning point: Choose modern cryptography and key-management practices that match the confidentiality, integrity, authentication, and lifecycle requirements, and protect keys as carefully as the data. Cryptographic strength depends on algorithms, key management, certificate trust, implementation, and lifecycle controls together.

Question 23

During a risk workshop for the software delivery pipeline, the team identifies Key management and rotation as the deciding issue. The security operations manager is expected to address the control objective while keeping the control sustainable for normal operations. What is the MOST appropriate course of action? The architecture contains 60 separately managed trust zones or platform components.

1. Use layered facility, environmental, fire, utility, power, and restricted-area controls to remove single points of physical failure.
2. Document the risk as accepted without identifying an accountable risk owner or evaluating residual impact.
3. Define key generation, storage, access, rotation, revocation, backup, and destruction as one governed key lifecycle.
4. Select and place site-security controls from a threat and criticality assessment, considering layered deterrence, detection, delay, and response.

Correct answer: C

Why: Cryptographic controls fail when key lifecycle practices are weak even if the algorithm is strong. It directly addresses Key management and rotation while keeping the control sustainable for normal operations.

Option review:

A: Data-center security includes environmental resilience and life-safety controls as well as access barriers. That action can be useful in a different security decision, but it does not most directly address Key management and rotation in this scenario.

B: Risk acceptance is a business decision that requires informed ownership and cannot substitute for analysis. That action can be useful in a different security decision, but it does not most directly address Key management and rotation in this scenario.

C: Cryptographic controls fail when key lifecycle practices are weak even if the algorithm is strong. It directly addresses Key management and rotation while keeping the control sustainable for normal operations.

D: Facility security is most effective when physical controls are designed as a coordinated system around threats and business criticality. That action can be useful in a different security decision, but it does not most directly address Key management and rotation in this scenario.

Learning point: Define key generation, storage, access, rotation, revocation, backup, and destruction as one governed key lifecycle. Cryptographic controls fail when key lifecycle practices are weak even if the algorithm is strong.

Question 24

A control owner at Alpine Sports proposes a quick technical fix for Digital signatures in the AI-assisted customer service platform. The business continuity lead must address the control objective while ensuring the decision can be repeated consistently across business units. What should happen FIRST? The architecture contains 77 separately managed trust zones or platform components.

1. Rely on a manual checklist performed during emergencies instead of establishing a repeatable preventive or detective control.
2. Integrate security requirements, verification, change control, maintenance, and secure disposal throughout the information-system lifecycle.
3. Derive controls from explicit system security requirements, threat assumptions, and assurance needs before choosing products.
4. Use a managed PKI trust chain and digital signatures with certificate validation, revocation handling, and protected private keys.

Correct answer: D

Why: PKI and digital signatures provide scalable authentication, integrity, and nonrepudiation only when trust and key lifecycle are managed. It directly addresses Digital signatures while ensuring the decision can be repeated consistently across business units.

Option review:

A: Manual emergency workarounds are fragile and do not provide the consistent assurance required by the scenario. That action can be useful in a different security decision, but it does not most directly address Digital signatures in this scenario.

B: Security decisions must be maintained and revalidated as the system moves from requirements through retirement. That action can be useful in a different security decision, but it does not most directly address Digital signatures in this scenario.

C: Control selection is defensible when it traces to requirements and risk rather than vendor preference. That action can be useful in a different security decision, but it does not most directly address Digital signatures in this scenario.

D: PKI and digital signatures provide scalable authentication, integrity, and nonrepudiation only when trust and key lifecycle are managed. It directly addresses Digital signatures while ensuring the decision can be repeated consistently across business units.

Learning point: Use a managed PKI trust chain and digital signatures with certificate validation, revocation handling, and protected private keys. PKI and digital signatures provide scalable authentication, integrity, and nonrepudiation only when trust and key lifecycle are managed.

Question 25

Fabrikam Manufacturing is standardizing security across several business units. The global collaboration platform raises a question about Digital certificates. The privacy and compliance lead needs to address the control objective while preserving clear accountability and audit evidence. Which action provides the BEST governance and security outcome? The architecture contains 3 separately managed trust zones or platform components.

1. Deploy a new security product immediately before confirming scope, ownership, or the required security outcome.
2. Use layered facility, environmental, fire, utility, power, and restricted-area controls to remove single points of physical failure.
3. Derive controls from explicit system security requirements, threat assumptions, and assurance needs before choosing products.
4. Use a managed PKI trust chain and digital signatures with certificate validation, revocation handling, and protected private keys.

Correct answer: D

Why: PKI and digital signatures provide scalable authentication, integrity, and nonrepudiation only when trust and key lifecycle are managed. It directly addresses Digital certificates while preserving clear accountability and audit evidence.

Option review:

A: A product-first response can add complexity without proving that the actual governance, risk, or control requirement is satisfied. That action can be useful in a different security decision, but it does not most directly address Digital certificates in this scenario.

B: Data-center security includes environmental resilience and life-safety controls as well as access barriers. That action can be useful in a different security decision, but it does not most directly address Digital certificates in this scenario.

C: Control selection is defensible when it traces to requirements and risk rather than vendor preference. That action can be useful in a different security decision, but it does not most directly address Digital certificates in this scenario.

D: PKI and digital signatures provide scalable authentication, integrity, and nonrepudiation only when trust and key lifecycle are managed. It directly addresses Digital certificates while preserving clear accountability and audit evidence.

Learning point: Use a managed PKI trust chain and digital signatures with certificate validation, revocation handling, and protected private keys. PKI and digital signatures provide scalable authentication, integrity, and nonrepudiation only when trust and key lifecycle are managed.

Question 26

During a internal audit response, Trey Research asks the security architect to address Brute-force attacks for its e-commerce application. The requirement is to address the control objective while protecting sensitive data throughout the change. What should the organization do FIRST? The architecture contains 20 separately managed trust zones or platform components.

1. Choose modern cryptography and key-management practices that match the confidentiality, integrity, authentication, and lifecycle requirements, and protect keys as carefully as the data.
2. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.
3. Increase effective key or credential entropy and add rate-limiting or lockout controls where authentication is involved.
4. Grant a small operations group broad administrator access so they can work around the issue whenever it appears.

Correct answer: C

Why: Brute-force resistance depends on search-space strength and limiting repeated guesses. It directly addresses Brute-force attacks while protecting sensitive data throughout the change.

Option review:

A: Cryptographic strength depends on algorithms, key management, certificate trust, implementation, and lifecycle controls together. That action can be useful in a different security decision, but it does not most directly address Brute-force attacks in this scenario.

B: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Brute-force attacks in this scenario.

C: Brute-force resistance depends on search-space strength and limiting repeated guesses. It directly addresses Brute-force attacks while protecting sensitive data throughout the change.

D: Broad standing privilege conflicts with least privilege and treats symptoms rather than fixing the underlying control design. That action can be useful in a different security decision, but it does not most directly address Brute-force attacks in this scenario.

Learning point: Increase effective key or credential entropy and add rate-limiting or lockout controls where authentication is involved. Brute-force resistance depends on search-space strength and limiting repeated guesses.