CYBERSECURITY-AUDIT-CERTIFICATE practice question 9 of 25
The most common use of asymmetric algorithms is to:
Full set: 134 questionsAsymmetric (public-key) cryptography is significantly slower and more computationally expensive than symmetric cryptography. Therefore, it is inefficient for encrypting large volumes of data. Its most common and effective use is within a hybrid cryptosystem to securely exchange a smaller, single-use symmetric key (a session key). The sender encrypts the session key with the recipient's public key, and the recipient decrypts it with their private key. This fast symmetric key is then used to encrypt the bulk data for the remainder of the session.
A. Encrypting bulk data is the primary use case for faster symmetric algorithms like AES, not slower asymmetric ones.
B. Data streams, like bulk data, are too large to be efficiently encrypted using computationally intensive asymmetric algorithms.
D. Asymmetric public keys are designed to be public and are typically distributed through a trusted Public Key Infrastructure (PKI), not by being encrypted.
1. ISACA. (2019). Cybersecurity Audit Certificate Study Guide (2nd ed.). Chapter 3, "Cybersecurity Operations," p. 80. The guide states, "Asymmetric encryption is often used to encrypt symmetric keys for distribution."
2. Katz, J., & Lindell, Y. (2014). Introduction to Modern Cryptography (2nd ed.). CRC Press. Chapter 10.1, "Public-Key Encryption," pp. 330-332. The text explains the concept of hybrid encryption where a public-key system is used to encrypt a shared key for a symmetric cipher.
3. Stallings, W. (2017). Cryptography and Network Security: Principles and Practice (7th ed.). Pearson. Section 9.2, "The RSA Algorithm," p. 279. The text describes how RSA is often used for the distribution of session keys for symmetric ciphers.
Keep practicing
Take the free CYBERSECURITY-AUDIT-CERTIFICATE practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other CYBERSECURITY-AUDIT-CERTIFICATE practice questions
- Question 1Which of the following backup methods takes the MOST time for restoration of data?
- Question 2Which of the following provides an early signal of increasing risk exposures for an organ…
- Question 3An IS auditor has learned that a cloud service provider has not adequately secured its ap…
- Question 4When performing a teaming exercise, which team works to integrate the defensive tactics a…
- Question 5Which of the following defines the minimum acceptable rules for policy compliance?
- Question 6What is the PRIMARY benefit of ensuring timely and reliable access to information systems?
