CCOA: Certified Cybersecurity Operations Analyst

By Isaca · Question Mode

QuestionQ75

VerifiedSecuring Assets

While assessing encryption used for data in an organization’s databases, a cybersecurity analyst finds that some databases use the SHA-1 or 3-DES encryption algorithms, whereas others use AES-256. Which algorithm should the analyst recommend?

Explanation

AES-256 is a modern symmetric encryption algorithm with a 256-bit key. SHA-1 is a hashing function, not reversible encryption, and NIST is transitioning away from it. Three-key Triple DES is restricted to legacy decryption, unwrapping, or CMAC-verification use; AES is the appropriate choice for protecting database data.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!