Which of the following is a common application of Elliptic Curve Cryptography (ECC)?

Generating random numbers for cryptographic use

Securing web traffic with TLS/SSL

Symmetric encryption of large files

A government agency is planning a new secure communication system that must remain secure for the next 30 years. They are concerned about future quantum computing attacks. Which cryptographic approach should they adopt?

Use RSA-2048 for all key exchanges.

Use ECC with a 256-bit curve for all operations.

Use post-quantum cryptographic algorithms such as lattice-based cryptography.

A security administrator must choose a symmetric encryption algorithm for a new system that will process sensitive data. The system must be compliant with government standards and must be efficient on modern hardware. Which algorithm should be selected?

Use Blowfish with a 448-bit key.

Use 3DES with a 112-bit effective key.

A security architect must choose a digital signature algorithm for a new system that will be used for 15 years. The system has moderate computational resources. The architect is concerned about both classical and quantum attacks. Which algorithm should be selected?

Use a hash-based signature scheme like XMSS.

Use ECC with a 384-bit curve and SHA-384.

Certified Information Systems Security Professional

Domain 3Objective 6

3.6 - Select and Determine Cryptographic Solutions CISSP Practice Questions (Page 5)

Part of the Security Architecture and Engineering domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

13%of the exam

Questions 21–25

21foundation · easy
Which of the following is a common application of Elliptic Curve Cryptography (ECC)?
Select an answer first
22application · medium
A government agency is planning a new secure communication system that must remain secure for the next 30 years. They are concerned about future quantum computing attacks. Which cryptographic approach should they adopt?
Select an answer first
23foundation · easy
In the cryptographic life cycle, which stage involves replacing an existing key with a new one before the old key's cryptographic period expires?
Select an answer first
24expert · hard
A security administrator must choose a symmetric encryption algorithm for a new system that will process sensitive data. The system must be compliant with government standards and must be efficient on modern hardware. Which algorithm should be selected?
Select an answer first
25expert · hard
A security architect must choose a digital signature algorithm for a new system that will be used for 15 years. The system has moderate computational resources. The architect is concerned about both classical and quantum attacks. Which algorithm should be selected?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.