Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

ISC2 CCSP Exam - Topic 5 Question 39 Discussion

Cryptographic keys should be secured ________________ .
A) To a level at least as high as the data they can decrypt
B) In vaults
C) With two-person integrity
D) By armed guards

ISC2 CCSP Exam - Topic 5 Question 39 Discussion

Actual exam question for ISC2's CCSP exam
Question #: 39
Topic #: 5
[All CCSP Questions]

Cryptographic keys should be secured ________________ .

Show Suggested Answer Hide Answer
Suggested Answer: A

The physical security of crypto keys is of some concern, but guards or vaults are not always necessary. Two-person integrity might be a good practice for protecting keys. The best answer to this question is option A, because it is always true, whereas the remaining options depend on circumstances.


by Joni at May 04, 2022, 01:03 AM

Limited Time Offer

25%

Off

Get Premium CCSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Tess
8 months ago
I thought vaults were for physical assets, not keys!
upvoted 0 times
...
Denny
9 months ago
Armed guards? Really? Seems a bit over the top.
upvoted 0 times
...
France
9 months ago
C is a must for sensitive info, no doubt!
upvoted 0 times
...
Matthew
9 months ago
B is a bit extreme, but I get the point.
upvoted 0 times
...
Lashawn
9 months ago
Definitely A! Keys need to be as secure as the data.
upvoted 0 times
...
Andree
9 months ago
I don't recall much about armed guards, so D seems less likely, but I guess it could be a possibility in some contexts.
upvoted 0 times
...
Ozell
9 months ago
I’m leaning towards C because two-person integrity sounds familiar from our discussions on access controls.
upvoted 0 times
...
Candra
9 months ago
I feel like I saw a question about securing keys in vaults before, so maybe B is a good option too?
upvoted 0 times
...
Valentine
9 months ago
I think the answer might be A, but I'm not completely sure. I remember something about securing keys at least as high as the data they protect.
upvoted 0 times
...
Tamekia
9 months ago
Hmm, I'm a bit unsure about this one. I know Berkeley Software Distribution was an important UNIX variant, but I can't remember if it was the first widely adopted commercial one. I'll have to think this through carefully.
upvoted 0 times
...
Eric
9 months ago
Okay, let's see. Reducing the size of the repository could help, but I'm not sure if that's really the core issue. Maybe we should look at creating an agent pool instead?
upvoted 0 times
...
Lavonna
9 months ago
Okay, I think I've got this. A probability impact grid provides a clear visual way to see how different risks are aggregated and how they relate to each other. That seems like the best fit for what the question is asking.
upvoted 0 times
...
Mira
10 months ago
This question seems straightforward - it's asking about the type of provider incentive arrangement described in the information. I think I can eliminate a couple of the options pretty quickly.
upvoted 0 times
...
Robt
10 months ago
I wonder if "None of the above" could be correct, but I'm not confident since I don't recall any specific details to support that claim.
upvoted 0 times
...

Save Cancel