What is the primary purpose of key rotation in a cryptographic system?

To convert symmetric keys into asymmetric key pairs

To increase the speed of encryption and decryption operations

To limit the amount of data encrypted with a single key and reduce the impact of a key compromise

To make keys easier to remember for users

Two remote offices need to establish a secure communication channel over the internet. They do not have a pre-shared secret. They want to use a key exchange protocol that provides forward secrecy. Which key exchange method should they use?

Diffie-Hellman key exchange with ephemeral keys

Public key distribution via a certificate authority

RSA key exchange using the recipient's public key

In public key distribution, how is a user's public key typically made available to others?

By storing it in a hardware security module only

By sending it only to trusted friends via email

Through a public directory or certificate

By embedding it in the user's password

A financial institution is required by regulation to maintain the ability to decrypt archived communications for law enforcement, but it also must protect customer privacy. They are considering key escrow. Which design best balances these requirements?

Destroy keys after a retention period to eliminate the need for escrow

Store keys in a hardware security module (HSM) with no external access

Use a single escrow agent to hold all keys, with access granted upon request

Split the keys among multiple escrow agents, requiring a threshold of agents to reconstruct the key

In the Web of Trust model, how is trust in a public key established?

Through a central certificate authority that issues certificates

Through a chain of peer-to-peer key signatures

Through a public key server that verifies all keys

Through a government-issued identity card

Systems Security Certified Practitioner

Domain 5Objective 4

5.4 - Understand Public Key Infrastructure (PKI) SSCP Practice Questions (Page 5)

Part of the Cryptography domain, which accounts for 9% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–7 in this domain), expect 1–2 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

11concepts

9%of the exam

Questions 21–25

21foundation · easy
What is the primary purpose of key rotation in a cryptographic system?
Select an answer first
22application · medium
Two remote offices need to establish a secure communication channel over the internet. They do not have a pre-shared secret. They want to use a key exchange protocol that provides forward secrecy. Which key exchange method should they use?
Select an answer first
23foundation · easy
In public key distribution, how is a user's public key typically made available to others?
Select an answer first
24expert · hard
A financial institution is required by regulation to maintain the ability to decrypt archived communications for law enforcement, but it also must protect customer privacy. They are considering key escrow. Which design best balances these requirements?
Select an answer first
25foundation · easy
In the Web of Trust model, how is trust in a public key established?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.