Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 CCSP Exam - Topic 5 Question 39 Discussion

Posted by Joni on May 04, 2022 at 01:03 AM

Cryptographic keys should be secured ________________ .

Suggested Answer: A

The physical security of crypto keys is of some concern, but guards or vaults are not always necessary. Two-person integrity might be a good practice for protecting keys. The best answer to this question is option A, because it is always true, whereas the remaining options depend on circumstances.


Get Premium CCSP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
14 comments · newest first
TE
Tess 11 months ago
I thought vaults were for physical assets, not keys!
DE
Denny 12 months ago
Armed guards? Really? Seems a bit over the top.
FR
France 12 months ago
C is a must for sensitive info, no doubt!
MA
Matthew 12 months ago
B is a bit extreme, but I get the point.
LA
Lashawn 1 year ago
Definitely A! Keys need to be as secure as the data.
AN
Andree 1 year ago
I don't recall much about armed guards, so D seems less likely, but I guess it could be a possibility in some contexts.
OZ
Ozell 1 year ago
I’m leaning towards C because two-person integrity sounds familiar from our discussions on access controls.
CA
Candra 1 year ago
I feel like I saw a question about securing keys in vaults before, so maybe B is a good option too?
VA
Valentine 1 year ago
I think the answer might be A, but I'm not completely sure. I remember something about securing keys at least as high as the data they protect.
TA
Tamekia 1 year ago
Hmm, I'm a bit unsure about this one. I know Berkeley Software Distribution was an important UNIX variant, but I can't remember if it was the first widely adopted commercial one. I'll have to think this through carefully.
ER
Eric 1 year ago
Okay, let's see. Reducing the size of the repository could help, but I'm not sure if that's really the core issue. Maybe we should look at creating an agent pool instead?
LA
Lavonna 1 year ago
Okay, I think I've got this. A probability impact grid provides a clear visual way to see how different risks are aggregated and how they relate to each other. That seems like the best fit for what the question is asking.
MI
Mira 1 year ago
This question seems straightforward - it's asking about the type of provider incentive arrangement described in the information. I think I can eliminate a couple of the options pretty quickly.
RO
Robt 1 year ago
I wonder if "None of the above" could be correct, but I'm not confident since I don't recall any specific details to support that claim.
0/2000 characters

Save Cancel