header bg

Scan QR code or get instant email to install app

Question:

Liam is setting up a public key infrastructure (PKI) and knows that keeping the passphrases and encryption keys used to generate new keys is a critical part of how to ensure that the root certificate authority remains secure. Which of the following techniques is NOT a common solution to help prevent insider threats?

A Require a new passphrase every time the certificate is used.
explanation

Dual control, which requires two individuals to perform a function; split knowledge, which splits the passphrase or key between two or more people; and separation of duties, which ensures that a single individual does not control or oversee the entire process all help prevent insider threats when managing a PKI. Requiring a new passphrase when a certificate is used is NOT a reasonable solution and would require reissuing the certificate.

Related Information

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *

*