A healthcare organization must encrypt data at rest in a new database. The compliance team requires that the encryption algorithm be FIPS 140-2 validated and that the key management process include automated key rotation every 90 days. Which solution should the security architect select?

Use AES-256 with a key management service that supports automated rotation.

Use DES with a key management service that supports automated rotation.

Use AES-128 with a static key stored in the application configuration file.

Use RSA-2048 for data encryption and manually rotate keys annually.

What is a primary limitation of Quantum Key Distribution (QKD) in practical deployment?

It requires specialized hardware and has distance limitations

It requires a classical channel for key exchange

It is vulnerable to man-in-the-middle attacks

It can only be used for symmetric encryption

A research lab needs to exchange a symmetric key with a remote facility over a public network. The key must be exchanged with absolute certainty that no eavesdropper intercepted it. Which method should they use?

Use a pre-shared key sent via courier.

Use Diffie-Hellman key exchange over the internet.

Use RSA to encrypt the symmetric key and send it over the internet.

Use Quantum Key Distribution (QKD) over a fiber link.

What fundamental property of quantum mechanics does Quantum Key Distribution (QKD) rely on to detect eavesdropping?

The no-cloning theorem and measurement disturbance

Certified Information Systems Security Professional

Domain 3Objective 6

3.6 - Select and Determine Cryptographic Solutions CISSP Practice Questions (Page 2)

Part of the Security Architecture and Engineering domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

13%of the exam

Questions 6–10

6application · medium
A healthcare organization must encrypt data at rest in a new database. The compliance team requires that the encryption algorithm be FIPS 140-2 validated and that the key management process include automated key rotation every 90 days. Which solution should the security architect select?
Select an answer first
7foundation · easy
What is a primary limitation of Quantum Key Distribution (QKD) in practical deployment?
Select an answer first
8application · medium
A security administrator is responsible for managing encryption keys for a large enterprise. The administrator needs to ensure that keys are replaced on a regular schedule and that old keys are securely destroyed after a defined period. Which stages of the cryptographic life cycle are being addressed?
Select an answer first
9application · medium
A research lab needs to exchange a symmetric key with a remote facility over a public network. The key must be exchanged with absolute certainty that no eavesdropper intercepted it. Which method should they use?
Select an answer first
10foundation · easy
What fundamental property of quantum mechanics does Quantum Key Distribution (QKD) rely on to detect eavesdropping?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.