Cryptography Concepts for Managers GSLC Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A healthcare organization needs to encrypt a large database backup that will be stored in a cloud archive for 7 years. The backup is accessed only by a small internal team, and the organization wants to minimize the performance impact of encryption on the backup process. Which approach best meets these requirements?

   • AUse a hash function to encrypt the backup and store the hash value as the key.
   • BUse asymmetric encryption with the public key of each team member to encrypt the backup.
   • CUse a symmetric algorithm and embed the key in the backup script for simplicity.
   • DUse a symmetric encryption algorithm with a dedicated key stored in a hardware security module (HSM).
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A startup wants to enable secure email communication with external partners without pre-sharing any secrets. They need a way for partners to send them encrypted messages. What should the startup implement?

   • AAsk partners to send plaintext emails and rely on the email provider's security.
   • BPublish a public key certificate that partners can use to encrypt messages.
   • CShare a common symmetric key with each partner via email.
   • DUse a hash of the message as the encryption key.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security manager must choose between two encryption solutions for a new document management system. Solution A uses a single organization-wide key managed by a central team. Solution B uses per-document keys that are automatically generated and stored in a key management system. The system must support legal discovery, where specific documents must be produced in court. Which solution is more appropriate, and why?

   • ASolution B, because it eliminates the need for key rotation.
   • BSolution A, because a single key simplifies legal discovery by allowing all documents to be decrypted with one key.
   • CSolution B, because per-document keys limit the impact of a key compromise and allow fine-grained access control for legal discovery.
   • DSolution A, because it is easier to manage and reduces the risk of key loss.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A software development team wants to ensure that the container images they build are not tampered with after being pushed to a registry. They also want to verify the publisher of each image. What should they implement?

   • ASign the image manifest with a private key and verify it with the corresponding public key.
   • BRely on the registry's access controls to prevent tampering.
   • CEncrypt the image with a symmetric key shared with the registry.
   • DUse a strong hash and store it in the image metadata.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company is designing a system to store legal documents. The requirement is that any modification to a document must be detectable, and the system must be able to prove who submitted each document. Which combination of controls should be used?

   • AEncrypt each document with a shared symmetric key.
   • BUse a checksum and store the submitter's username in a database.
   • CHash each document and require submitters to digitally sign the hash.
   • DStore documents in a read-only directory with access logs.
   Reveal Solution Discussion Select an answer first