A technology company has developed a proprietary algorithm that is a key competitive advantage. They need to protect this intellectual property when storing it in a shared development environment. Which cryptographic control is most appropriate?

Digitally sign the algorithm code

Encrypt the algorithm code at rest

Hash the algorithm code to verify its integrity

A company processes payment transactions and must comply with PCI-DSS. They are designing a new system to store cardholder data. Which cryptographic control is mandated by PCI-DSS for this data?

Encrypting cardholder data at rest using strong cryptography

Using digital signatures to protect cardholder data

Storing cardholder data in plaintext but restricting access

Hashing cardholder data to ensure confidentiality

A healthcare organization must transmit patient records between two facilities over the internet. The compliance officer requires that the data be unreadable to anyone intercepting the transmission, and that the organization meets HIPAA expectations for protecting PHI. Which cryptographic control directly addresses the stated requirement?

Storing the data in an encrypted database at the destination

Hashing the data before transmission

Applying a digital signature to the data

Encrypting the data in transit using TLS

A government agency needs to ensure that official documents are authentic and have not been tampered with. They also need to comply with federal information processing standards. Which cryptographic mechanism should they use?

Using a MAC with a shared secret

Hashing the documents with SHA-1

Digital signatures using a FIPS-validated algorithm

Symmetric encryption with a shared key

Systems Security Certified Practitioner

Domain 5Objective 1

5.1 - Understand Reasons and Requirements for Cryptography SSCP Practice Questions (Page 4)

Part of the Cryptography domain, which accounts for 9% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–7 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

6concepts

9%of the exam

Questions 16–20

16foundation · easy
Which regulatory standard specifically mandates encryption for payment card data?
Select an answer first
17application · medium
A technology company has developed a proprietary algorithm that is a key competitive advantage. They need to protect this intellectual property when storing it in a shared development environment. Which cryptographic control is most appropriate?
Select an answer first
18application · medium
A company processes payment transactions and must comply with PCI-DSS. They are designing a new system to store cardholder data. Which cryptographic control is mandated by PCI-DSS for this data?
Select an answer first
19application · medium
A healthcare organization must transmit patient records between two facilities over the internet. The compliance officer requires that the data be unreadable to anyone intercepting the transmission, and that the organization meets HIPAA expectations for protecting PHI. Which cryptographic control directly addresses the stated requirement?
Select an answer first
20application · medium
A government agency needs to ensure that official documents are authentic and have not been tampered with. They also need to comply with federal information processing standards. Which cryptographic mechanism should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

5.1 - Understand Reasons and Requirements for Cryptography SSCP Practice Questions (Page 4)

Questions 16–20

Which regulatory standard specifically mandates encryption for payment card data?

A technology company has developed a proprietary algorithm that is a key competitive advantage. They need to protect this intellectual property when storing it in a shared development environment. Which cryptographic control is most appropriate?

A company processes payment transactions and must comply with PCI-DSS. They are designing a new system to store cardholder data. Which cryptographic control is mandated by PCI-DSS for this data?

A government agency needs to ensure that official documents are authentic and have not been tampered with. They also need to comply with federal information processing standards. Which cryptographic mechanism should they use?

Keep studying — Cryptography