A bank wants to use Quantum Key Distribution (QKD) to secure communications between two data centers. The data centers are 150 km apart. The bank's security team is concerned about the distance limitation of QKD. Which approach should they take?

Use QKD with a quantum repeater.

Use QKD with trusted repeaters at intermediate points.

Use standard Diffie-Hellman key exchange instead.

In a Public Key Infrastructure (PKI), what is the role of a Certificate Authority (CA)?

To encrypt all data transmitted over the network

To store all users' private keys

To issue and digitally sign digital certificates

To generate the private keys for all users

A company's certificate authority is compromised, and the security team must ensure that all certificates issued by that CA are no longer trusted. Which action should be taken?

Increase the validity period of all certificates.

Revoke all certificates issued by the CA and publish a new Certificate Revocation List (CRL).

Delete the CA's private key and continue using the same public key.

Reissue all certificates with the same CA key.

A large enterprise is migrating to a new encryption standard. The security team must ensure that data encrypted with the old algorithm remains readable during the transition. Which approach should they take?

Decrypt all data with the old key and re-encrypt with the new algorithm immediately.

Delete all old data and start fresh.

Use a hybrid approach: keep the old algorithm for existing data and use the new algorithm for new data, with a migration plan.

Use the new algorithm to decrypt old data.

What is the purpose of quantum-resistant algorithms?

To replace symmetric encryption with quantum key distribution

To provide encryption that is secure against attacks from quantum computers

To make encryption algorithms immune to all types of attacks

To speed up encryption on classical computers

Certified Information Systems Security Professional

Domain 3Objective 6

3.6 - Select and Determine Cryptographic Solutions CISSP Practice Questions (Page 3)

Part of the Security Architecture and Engineering domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

13%of the exam

Questions 11–15

11expert · hard
A bank wants to use Quantum Key Distribution (QKD) to secure communications between two data centers. The data centers are 150 km apart. The bank's security team is concerned about the distance limitation of QKD. Which approach should they take?
Select an answer first
12foundation · easy
In a Public Key Infrastructure (PKI), what is the role of a Certificate Authority (CA)?
Select an answer first
13application · medium
A company's certificate authority is compromised, and the security team must ensure that all certificates issued by that CA are no longer trusted. Which action should be taken?
Select an answer first
14expert · hard
A large enterprise is migrating to a new encryption standard. The security team must ensure that data encrypted with the old algorithm remains readable during the transition. Which approach should they take?
Select an answer first
15foundation · easy
What is the purpose of quantum-resistant algorithms?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.