Why does Protected Health Information (PHI) require cryptographic protection?

To speed up the transmission of medical records

To reduce the storage size of medical records

To ensure the data is available to all medical staff at all times

To comply with regulations such as HIPAA and protect patient privacy

In cryptography, what does 'entropy' refer to?

The amount of data that can be encrypted with a single key

The speed at which encryption algorithms operate

The measure of unpredictability or randomness in a key generation process

The length of the encryption key in bits

Why is high entropy important when generating cryptographic keys?

It makes the key easier to remember for users

It reduces the likelihood that an attacker can predict or guess the key

It ensures the key is compatible with all encryption algorithms

It increases the speed of encryption and decryption

A retail company stores customer credit card numbers to process transactions. The security team must implement controls to comply with PCI-DSS. Which data category and corresponding cryptographic control is required?

Intellectual property; apply a digital signature to the data

Cardholder data; encrypt the data during transmission and at rest

PII; hash the data to protect it from unauthorized access

PHI; encrypt the data at rest using AES-256

Systems Security Certified Practitioner

Domain 5Objective 1

5.1 - Understand Reasons and Requirements for Cryptography SSCP Practice Questions (Page 2)

Part of the Cryptography domain, which accounts for 9% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–7 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

6concepts

9%of the exam

Questions 6–10

6foundation · easy
Why does Protected Health Information (PHI) require cryptographic protection?
Select an answer first
7foundation · easy
In cryptography, what does 'entropy' refer to?
Select an answer first
8foundation · easy
Which cryptographic mechanism is specifically designed to provide confidentiality for data at rest?
Select an answer first
9foundation · easy
Why is high entropy important when generating cryptographic keys?
Select an answer first
10application · medium
A retail company stores customer credit card numbers to process transactions. The security team must implement controls to comply with PCI-DSS. Which data category and corresponding cryptographic control is required?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.