Isaca CDPSE Exam - Topic 10 Question 62 Discussion

Actual exam question for Isaca's CDPSE exam

Question #: 62
Topic #: 10

Which of the following is the PRIMARY reason that a single cryptographic key should be used for only one purpose, such as encryption or authentication?

AIt eliminates cryptographic key collision.

BIt minimizes the risk if the cryptographic key is compromised.

CIt is more practical and efficient to use a single cryptographic key.

DEach process can only be supported by its own unique key management process.

Show Suggested Answer

Suggested Answer: C

Data classification is the process of categorizing data according to its sensitivity, value, and criticality for the organization and the data subjects. Data classification has the greatest impact on the treatment of data within the scope of an organization's privacy policy, as it determines the appropriate level of protection, access, retention, and disposal for each type of dat

a. Data classification also helps to comply with the privacy principles and regulations, such as data minimization, purpose limitation, accuracy, security, and accountability.

by Margurite at Mar 07, 2025, 10:13 AM

Limited Time Offer

25%

Off

Get Premium CDPSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kattie

4 months ago

C might be practical, but it doesn't address security concerns.

upvoted 0 times

...

Paola

5 months ago

Surprised that people don't see how important it is to limit key use!

upvoted 0 times

...

Jaime

5 months ago

A seems off, key collision isn't the main issue here.

upvoted 0 times

...

Gwen

5 months ago

I agree, minimizing risk is crucial.

upvoted 0 times

...

Buck

5 months ago

B is definitely the right choice. Key compromise is a big deal!

upvoted 0 times

...

Kati

5 months ago

I’m leaning towards option C because it seems practical, but I recall something about key management being important as well.

upvoted 0 times

...

France

6 months ago

I feel like option B makes the most sense, but I could see how someone might argue for option A too. Key collision sounds familiar.

upvoted 0 times

...

Alease

6 months ago

I remember practicing a question like this, and I think it was about key management processes. But that doesn't seem like the primary reason here.

upvoted 0 times

...

Lawrence

6 months ago

I think the main reason for using a single key for one purpose is to minimize risk if it's compromised, but I'm not entirely sure.

upvoted 0 times

...

Sharika

6 months ago

I feel pretty confident about this one. The answer is B - using a single key for only one purpose minimizes the risk if the key is compromised. That way, a breach only affects one security process instead of multiple.

upvoted 0 times

...

Marg

6 months ago

Okay, I've got this. The primary reason is to minimize the risk if the key is compromised. Using a single key for multiple purposes means that a breach could impact multiple security processes, so it's best to keep them separate.

upvoted 0 times

...

Mose

6 months ago

Hmm, I'm a bit unsure about this one. I know using a single key for multiple purposes can be risky, but I'm not sure I fully understand the reasoning behind it. I'll have to think this through carefully.

upvoted 0 times

...

An

6 months ago

This seems like a straightforward question about cryptographic key usage. I think the key here is to focus on the primary reason, which is likely related to security and minimizing risk.

upvoted 0 times

...