Cryptography GSEC Practice Questions (Page 10)

Questions 46–48

1. 46application · medium

   A system administrator is responsible for a server that holds the private key used to sign software releases. Which practice is most important to protect this key?

   • AStore the key on a hardware security module (HSM) and restrict access to it.
   • BEncrypt the key with a password and store it in a backup file.
   • CKeep the key on the build server's local disk and rely on file permissions.
   • DShare the key among multiple administrators to ensure availability.
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A small company needs to encrypt files shared between two branch offices over the internet. They have a limited budget and no PKI infrastructure. The administrator wants a solution that provides strong confidentiality with minimal key management overhead. Which approach best meets these requirements?

   • AUse RSA-2048 to encrypt the files directly
   • BUse TLS with a self-signed certificate on both ends
   • CUse SHA-256 to encrypt the files
   • DUse AES-256 with a pre-shared key distributed out-of-band
   Reveal Solution Discussion Select an answer first
3. 48expert · hard

   A company is implementing a document signing system. The legal team requires that the signature be verifiable by third parties without contacting the company. Which key management practice is essential?

   • AThe company's public key must be widely distributed and trusted.
   • BThe company must use a longer key length for the signature.
   • CThe company's private key must be kept secret and stored in an HSM.
   • DThe company must use a symmetric key to sign documents.
   Reveal Solution Discussion Select an answer first