MENU
The messages exchanged between two services are kept confidential by using symmetric encryption. The security specialist is quite strict about making sure that no attacker is able to intercept and decipher messages sent between these two services. As a result, periodic audits are conducted in order to ensure that shared keys are always kept confidential. A single shared key has been in use for quite some time now. The security specialist was confident that all keys were well guarded, but just recently their security was compromised. How is this possible given that the shared key was never lost?
Suggested Answer: C
Get Premium S90.18 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
35 comments · newest first
MA
Maryln
11 months ago
Comparing messages over time can definitely expose the key.
FE
Felix
11 months ago
They probably cracked the algorithm. That's a classic move.
LI
Lisbeth
11 months ago
Wait, how did they even get the key if it was never lost?
LU
Lucille
11 months ago
Totally agree, using the same key for too long is risky!
TH
Theresia
12 months ago
Symmetric encryption isn't great for long-term use.
AD
Adelina
12 months ago
I feel like the attackers could have figured out the encryption algorithm, but I’m not confident that alone would lead to the key being compromised.
SO
Sonia
1 year ago
This reminds me of a practice question where the attackers exploited the same key being reused. I wonder if that's the case here too?
JE
Jenise
1 year ago
I'm not entirely sure, but I think if the same key is used for too long, it can become vulnerable to attacks. Could that be what happened here?
MA
Marci
1 year ago
I remember studying that symmetric keys should be rotated regularly to maintain security. Maybe that's why the key was compromised?
FR
Frederica
1 year ago
Ah, I see what's going on. The shared key was likely compromised through cryptanalysis, even though it was never physically lost. Option D seems the most plausible explanation here.
WA
Wade
1 year ago
This seems like a classic case of key compromise due to long-term use of the same key. The security specialist should have rotated the keys more frequently. I'll go with option C.
WI
Wilbert
1 year ago
I'm a bit confused here. Symmetric encryption is supposed to be secure if the key is kept confidential. How could the attackers have obtained the key without it being lost? Option B seems like the most likely explanation.
TA
Talia
1 year ago
Okay, let's see. If the shared key was never lost, then the issue must be with how it was used or managed over time. I'm leaning towards option C.
MO
Monroe
1 year ago
Hmm, this is a tricky one. I'll need to think through the key management and encryption details carefully to figure out the right answer.
FA
Fatima
2 years ago
D sounds plausible. If the attackers got hold of some private keys used in the past, they might have been able to reverse-engineer the shared key. Security is hard, even for the pros.
BR
Brendan
2 years ago
Haha, the security specialist must have been asleep at the wheel! Didn't they know that shared keys need to be rotated regularly? This is Crypto 101, folks.
RO
Rozella
2 years ago
C) Because the same shared key was used for a long time, attackers were able to obtain the key by comparing messages sent between the two services.
RA
Ramonita
2 years ago
B) The attackers somehow figured out which encryption algorithm was used. As a result, they were able to decipher the messages.
LI
Lillian
2 years ago
A) Symmetric encryption is not intended for long-term use. It needs to be replaced with asymmetric encryption after some time.
NE
Nelida
2 years ago
Maybe we should have replaced the shared key with asymmetric encryption sooner.
ME
Merilyn
2 years ago
I think the attackers must have somehow obtained the key by comparing messages.
ET
Ettie
2 years ago
I can't believe the shared key was compromised!
MA
Mattie
2 years ago
Hmm, I don't know. Symmetric encryption should be replaced periodically, but I'm not sure that's the issue here. Maybe the attackers found a way to crack the algorithm itself?
AL
Alica
2 years ago
C) Because the same shared key was used for a long time, attackers were able to obtain the key by comparing messages sent between the two services.
BU
Buffy
2 years ago
B) The attackers somehow figured out which encryption algorithm was used. As a result, they were able to decipher the messages.
ST
Stefania
2 years ago
A) Symmetric encryption is not intended for long-term use. It needs to be replaced with asymmetric encryption after some time.
GL
Glendora
2 years ago
I think the answer is C. Using the same shared key for a long time makes it vulnerable to attacks like known-plaintext attacks. The attackers could have compared messages to deduce the key.
VI
Viola
2 years ago
D) The shared key was decoded by the attackers using algorithms from related private keys used during prior message exchanges.
ST
Stevie
2 years ago
C) Because the same shared key was used for a long time, attackers were able to obtain the key by comparing messages sent between the two services.
JE
Jerry
2 years ago
B) The attackers somehow figured out which encryption algorithm was used. As a result, they were able to decipher the messages.
MA
Marg
2 years ago
A) Symmetric encryption is not intended for long-term use. It needs to be replaced with asymmetric encryption after some time.
LO
Lourdes
2 years ago
D) The shared key was decoded by the attackers using algorithms from related private keys used during prior message exchanges.
RO
Rocco
2 years ago
C) Because the same shared key was used for a long time, attackers were able to obtain the key by comparing messages sent between the two services.
MA
Margarett
2 years ago
B) The attackers somehow figured out which encryption algorithm was used. As a result, they were able to decipher the messages.
AH
Ahmed
2 years ago
A) Symmetric encryption is not intended for long-term use. It needs to be replaced with asymmetric encryption after some time.