New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSAP Exam - Topic 6 Question 16 Discussion

Actual exam question for ISC2's ISSAP exam
Question #: 16
Topic #: 6
[All ISSAP Questions]

Which of the following algorithms is found to be suitable for both digital signature and encryption?

Show Suggested Answer Hide Answer
Suggested Answer: D

for signing as well as encryption, and one of the first great advances in public key cryptography. RSA is widely used in electronic commerce

protocols, and is believed to be secure given sufficiently long keys and the use of up-to-date implementations.

Answer option B is incorrect. Message Digest 5 (MD5) is a cryptographic hash function designed by Ron Rivest. As an Internet standard (RFC

1321), MD5 has been employed in a wide variety of security applications, and is also commonly used to check the integrity of files.

Answer option A is incorrect. SHA-1 produces a 160-bit digest from a message with a maximum length of (264 - 1) bits. SHA-1 is based on

principles similar to those used by Ronald L. Rivest of MIT in the design of the MD4 and MD5 message digest algorithms, but has a more

conservative design.

Answer option C is incorrect. The Advanced Encryption Standard (AES) is an encryption standard adopted by the U.S. government. The

standard comprises three block ciphers, AES-128, AES-192, and AES-256. Each AES cipher has a 128-bit block size, with key sizes of 128, 192,

and 256 bits, respectively. The AES ciphers have been analyzed extensively and are now used worldwide, as was the case with its

predecessor, the Data Encryption Standard (DES).


Contribute your Thoughts:

0/2000 characters
Lovetta
4 months ago
I thought MD5 was still used for some signatures?
upvoted 0 times
...
Lyndia
4 months ago
SHA-1 and MD5 are not suitable for that.
upvoted 0 times
...
Talia
4 months ago
Wait, isn't AES just for encryption?
upvoted 0 times
...
Sueann
4 months ago
Totally agree, RSA is versatile!
upvoted 0 times
...
Agustin
5 months ago
RSA is the one for both digital signatures and encryption.
upvoted 0 times
...
Pura
5 months ago
I thought MD5 was outdated for security purposes, so it can't be the right answer. Definitely feels like RSA fits best here.
upvoted 0 times
...
Aron
5 months ago
I'm leaning towards RSA too, but I vaguely recall something about SHA-1 being related to signatures.
upvoted 0 times
...
Kristel
5 months ago
I remember practicing a question like this, and I think AES is mainly for encryption, not signatures.
upvoted 0 times
...
Selma
5 months ago
I think RSA is the one that can be used for both digital signatures and encryption, but I'm not entirely sure.
upvoted 0 times
...
Roosevelt
5 months ago
Alright, time to put my problem-solving skills to the test. I've got a strategy in mind, let's see how it goes.
upvoted 0 times
...
Caitlin
5 months ago
I'm a bit confused by the wording of these options. Is a hot transfer considered "best practice" because it involves more interaction with the caller? Or is there some other reason why it's seen as the preferred approach? I'll need to re-read this a few times to make sure I understand the key distinction.
upvoted 0 times
...

Save Cancel