ISSAP - Information Systems Security Architecture Professional Architecting Cryptographic Solutions Questions and Answers — Questions and Answers
Question 1: A security architect is designing a system to protect sensitive data that will be stored for over 20 years. The architect is concerned about the future threat of quantum computing rendering current asymmetric encryption algorithms obsolete. Which of the following is the MOST important architectural principle to incorporate into the design to mitigate this long-term risk?
- Data fragmentation
- Homomorphic encryption
- Cryptographic agility (Correct answer)
- Perfect forward secrecy
Correct answer: Cryptographic agility
Cryptographic agility is the design principle that allows an information system to easily and quickly replace or update its cryptographic algorithms, keys, and protocols without major disruptions. This is crucial for long-term data protection, as it prepares the system for the eventual transition to post-quantum cryptography (PQC) algorithms, which are resistant to attacks from quantum computers. While other options are valid security concepts, they do not directly address the need to adapt to future, unforeseen weaknesses in specific cryptographic algorithms.
Question 2: A financial services company is architecting a new cloud-native application. The security architect must ensure that sensitive customer data is protected both when stored in cloud object storage and when transmitted between microservices. Which combination of cryptographic solutions BEST addresses this requirement?
- TLS for data in transit and AES-256 for data at rest. (Correct answer)
- IPsec for all data communication and TDE for the database.
- SSL for data at rest and SSH for data in transit.
- Asymmetric key encryption for all data states.
Correct answer: TLS for data in transit and AES-256 for data at rest.
The question requires protection for two distinct data states: data at rest (stored in object storage) and data in transit (transmitted between services). Transport Layer Security (TLS) is the standard protocol for encrypting data in transit over a network. Advanced Encryption Standard (AES) with a 256-bit key is a widely adopted, strong symmetric algorithm for encrypting data at rest. This combination directly and effectively addresses both requirements of the scenario.
Question 3: Which of the following is the PRIMARY reason for implementing a key rotation policy as part of a cryptographic key management lifecycle?
- To improve cryptographic performance.
- To comply with data retention policies.
- To simplify the key backup and recovery process.
- To limit the amount of data exposed if a key is compromised. (Correct answer)
Correct answer: To limit the amount of data exposed if a key is compromised.
The primary security benefit of key rotation is to limit the 'blast radius' if a key is compromised. By regularly changing keys, the amount of data encrypted with any single key is reduced. Therefore, if an attacker compromises one key, they can only decrypt the data protected by that specific key during its limited crypto-period, not the entire history of the data.
Question 4: A security architect is evaluating a proposal for a new enterprise-wide key management system. A key requirement is to prevent a single administrator from having complete control over the cryptographic keys, thereby preventing a single point of compromise. Which architectural concept should the architect ensure is implemented?
- Key escrow
- Split knowledge and separation of duties (Correct answer)
- Hardware Security Module (HSM) clustering
- Centralized key generation
Correct answer: Split knowledge and separation of duties
Split knowledge and separation of duties are core principles in key management that ensure no single person has unilateral access to or control over the entire key management process. Split knowledge involves dividing a key or access to keys among multiple individuals, while separation of duties ensures that different stages of the key lifecycle (e.g., generation, use, revocation) are controlled by different people or roles. This prevents a single compromised administrator from compromising the entire cryptographic system.
Question 5: When architecting a cryptographic solution for a multi-cloud environment, what is the most significant challenge a security architect must address regarding key management?
- Selecting algorithms that are supported by all cloud providers.
- Maintaining consistent key management policies and control across different providers. (Correct answer)
- Ensuring low latency for cryptographic operations.
- Meeting FIPS 140-2 validation requirements for all keys.
Correct answer: Maintaining consistent key management policies and control across different providers.
Each cloud service provider (CSP) has its own native key management service (KMS) with different APIs, policies, and capabilities. In a multi-cloud architecture, maintaining a consistent and centralized approach to key management policies, access control, and auditing becomes a major challenge. An architect must decide between using native tools, which leads to fragmented control, or implementing a third-party or hybrid KMS to achieve uniform governance across all cloud environments.
Question 6: An organization is preparing for a transition to post-quantum cryptography (PQC) in anticipation of future threats. The security architect has been tasked with creating a readiness plan. Which of the following is the MOST critical first step in this plan?
- Immediately replace all RSA and ECC algorithms with PQC alternatives.
- Create an inventory of all systems and applications that use cryptography. (Correct answer)
- Procure quantum computing hardware for internal testing.
- Decommission all systems that do not support cryptographic agility.
Correct answer: Create an inventory of all systems and applications that use cryptography.
Before any migration can occur, an organization must understand its current cryptographic landscape. Creating a comprehensive inventory of where cryptography is used, which algorithms and key lengths are implemented, and their business criticality is the essential first step. This inventory allows the organization to prioritize migration efforts, identify dependencies, and develop a strategic roadmap for a phased transition to PQC, addressing the most critical and sensitive assets first.
ISSAP - Information Systems Security Architecture Professional Architecting Cryptographic Solutions Questions and Answers
A security architect is designing a system to protect sensitive data that will be stored for over 20 years.
The architect is concerned about the future threat of quantum computing rendering current asymmetric encryption algorithms obsolete.
Which of the following is the MOST important architectural principle to incorporate into the design to mitigate this long-term risk?