CISSP-ISSAP: Information Systems Security Architecture Professional

By ISC · Question Mode

QuestionQ220

VerifiedInfrastructure and System Security

You are the Security Manager for Tech Perfect Inc. Management asks you to implement a hashing method in the organization that resists forgery and is not vulnerable to a man-in-the-middle attack. Which method should you use to accomplish this task?

Explanation

A MAC provides message integrity and authenticity using a shared secret key. Because an attacker does not possess that key, they cannot create a valid authentication tag for a forged or altered message.

Community Discussion

No comments yet. Be the first to start the discussion!