CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ25

VerifiedSecurity Architecture and Engineering

An organization is deploying data encryption with symmetric ciphers, and the Chief Information Officer (CIO) is worried about the risk of relying on a single key to protect all sensitive data. A security practitioner must recommend a solution that addresses the CIO's concern. Which of the following is the BEST way to meet this objective while encrypting all sensitive data?

Explanation

A hierarchy of encryption keys uses separate data-encryption keys for protected data and higher-level keys to encrypt or manage those keys. This avoids making one encryption key the single point of failure for all sensitive data, limiting the impact of a key compromise and supporting safer key rotation and management.

Community Discussion

No comments yet. Be the first to start the discussion!