CYBERSECURITY-AUDIT-CERTIFICATE practice question 9 of 25

The most common use of asymmetric algorithms is to:

Full set: 134 questions
Answer options
A: encrypt bulk data.
B: encrypt data streams.
C: distribute symmetric keys. Correct answer
D: distribute asymmetric keys.
Correct Answer:
C. distribute symmetric keys.
Explanation

Asymmetric (public-key) cryptography is significantly slower and more computationally expensive than symmetric cryptography. Therefore, it is inefficient for encrypting large volumes of data. Its most common and effective use is within a hybrid cryptosystem to securely exchange a smaller, single-use symmetric key (a session key). The sender encrypts the session key with the recipient's public key, and the recipient decrypts it with their private key. This fast symmetric key is then used to encrypt the bulk data for the remainder of the session.

Why Incorrect

A. Encrypting bulk data is the primary use case for faster symmetric algorithms like AES, not slower asymmetric ones.
B. Data streams, like bulk data, are too large to be efficiently encrypted using computationally intensive asymmetric algorithms.
D. Asymmetric public keys are designed to be public and are typically distributed through a trusted Public Key Infrastructure (PKI), not by being encrypted.

References

1. ISACA. (2019). Cybersecurity Audit Certificate Study Guide (2nd ed.). Chapter 3, "Cybersecurity Operations," p. 80. The guide states, "Asymmetric encryption is often used to encrypt symmetric keys for distribution."

2. Katz, J., & Lindell, Y. (2014). Introduction to Modern Cryptography (2nd ed.). CRC Press. Chapter 10.1, "Public-Key Encryption," pp. 330-332. The text explains the concept of hybrid encryption where a public-key system is used to encrypt a shared key for a symmetric cipher.

3. Stallings, W. (2017). Cryptography and Network Security: Principles and Practice (7th ed.). Pearson. Section 9.2, "The RSA Algorithm," p. 279. The text describes how RSA is often used for the distribution of session keys for symmetric ciphers.

Scroll to Top