Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSAP Exam - Topic 4 Question 17 Discussion

Posted by Ty on May 07, 2022 at 12:11 PM

Which of the following is an infrastructure system that allows the secure exchange of data over an unsecured network?

Suggested Answer: C

data and money through the use of a public and a private cryptographic key pair that is obtained and shared through a trusted authority. The

public key infrastructure assumes the use of public key cryptography, which is the most common method on the Internet for authenticating a

message sender or encrypting a message.

Answer option D is incorrect. Group Temporal Key (GTK) is a random value that is assigned by the broadcast/multicast source. It is used to

protect broadcast/multicast medium access control (MAC) protocol data units. It is derived from a group master key (GMK).

Answer option B is incorrect. Pairwise Transient Key (PTK) is a 64-byte key that comprises the following:

16 bytes of EAPOL-Key Confirmation Key (KCK): This key is used to compute MIC on WPA EAPOL Key message.

16 bytes of EAPOL-Key Encryption Key (KEK): AP uses this key to encrypt additional data sent (in the 'Key Data' field) to the client.

16 bytes of Temporal Key (TK): This key is used to encrypt/decrypt unicast data packets.

8 bytes of Michael MIC Authenticator Tx Key: This key is used to compute MIC on unicast data packets transmitted by the AP.

8 bytes of Michael MIC Authenticator Rx Key: This key is used to compute MIC on unicast data packets transmitted by the station.

Pairwise Transient Key is derived from the pairwise master key (PMK), Authenticator address (AA), Supplicant address (SPA), Authenticator

nonce (A Nonce), and Supplicant nonce (S Nonce) using pseudo-random function (PRF).

Answer option A is incorrect. Pairwise Master Key (PMK) is the highest order key used within the 802.11i amendment. It is derived directly from

a preshared key and can also be derived from the Extensible Authentication Protocol (EAP). It is a cryptography key that is used to derive

lower level keys.


Get Premium ISSAP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
15 comments · newest first
CO
Cordelia 11 months ago
Not convinced PKI is the only option here.
TY
Tyra 11 months ago
I thought PMK was more relevant in this context.
LE
Lelia 11 months ago
Wait, isn't GTK also used for security?
BI
Billye 11 months ago
Yeah, PKI is the way to go for secure data exchange.
AH
Ahmed 11 months ago
Pretty sure it's PKI.
DO
Dong 12 months ago
I'm pretty confident that the answer is C. PKI, or Public Key Infrastructure, is designed to enable secure data exchange over unsecured networks by using digital certificates and public/private key pairs.
SH
Shakira 12 months ago
Okay, let me try to break this down. The key is that it needs to be an infrastructure system, not just a cryptographic algorithm or protocol. I think PKI might be the best fit.
MA
Margery 12 months ago
Hmm, I'm a bit unsure about this one. I know PKI is related to digital certificates, but I'm not sure if that's the right answer here.
LE
Leonie 1 year ago
This looks like a question on cryptography and network security. I'll need to think through the different infrastructure systems that enable secure data exchange.
DO
Dorothy 1 year ago
I’m leaning towards PTK, but I can’t quite recall how it fits into secure data exchange.
OL
Olive 1 year ago
I practiced a question like this, and I feel like PMK was mentioned in a different context, so it probably isn't the answer.
TR
Tracey 1 year ago
I'm a bit unsure, but I remember something about GTK being related to encryption. Is that right?
FR
Franklyn 1 year ago
I think PKI might be the right answer since it deals with public key infrastructure for secure data exchange.
OR
Oren 1 year ago
I'm a bit confused about IGRP - I thought it was a classful protocol, not classless. I'll skip that one for now.
AN
Annice 1 year ago
Okay, let me see here. The escape sequence with the backslash makes sense. And a code point being a number for a character - that's definitely true. I'm not too sure about the other two though, so I'll have to guess on those.
0/2000 characters

Save Cancel