Arcitura Education Exam S90.18 Topic 4 Question 103 Discussion

Actual exam question for Arcitura Education's S90.18 exam

Question #: 103
Topic #: 4

The messages exchanged between two services are kept confidential by using symmetric encryption. The security specialist is quite strict about making sure that no attacker is able to intercept and decipher messages sent between these two services. As a result, periodic audits are conducted in order to ensure that shared keys are always kept confidential. A single shared key has been in use for quite some time now. The security specialist was confident that all keys were well guarded, but just recently their security was compromised. How is this possible given that the shared key was never lost?

ASymmetric encryption is not intended for long-term use. It needs to be replaced with asymmetric encryption after some time.

BThe attackers somehow figured out which encryption algorithm was used. As a result, they were able to decipher the messages.

CBecause the same shared key was used for a long time, attackers were able to obtain the key by comparing messages sent between the two services.

DThe shared key was decoded by the attackers using algorithms from related private keys used during prior message exchanges.

Show Suggested Answer

Suggested Answer: C

by Lindy at Nov 17, 2024, 06:25 PM

Limited Time Offer

25%

22 days ago

I think the answer is C. Using the same shared key for a long time makes it vulnerable to attacks like known-plaintext attacks. The attackers could have compared messages to deduce the key.

upvoted 0 times

Marg

1 days ago

A) Symmetric encryption is not intended for long-term use. It needs to be replaced with asymmetric encryption after some time.

upvoted 0 times

...

Lourdes

4 days ago

D) The shared key was decoded by the attackers using algorithms from related private keys used during prior message exchanges.

upvoted 0 times

...

Rocco

6 days ago

C) Because the same shared key was used for a long time, attackers were able to obtain the key by comparing messages sent between the two services.

upvoted 0 times

...

Margarett

9 days ago

B) The attackers somehow figured out which encryption algorithm was used. As a result, they were able to decipher the messages.

upvoted 0 times

...

Ahmed

10 days ago

A) Symmetric encryption is not intended for long-term use. It needs to be replaced with asymmetric encryption after some time.

upvoted 0 times

...