CISA Certified Information Systems Auditor – Question1585 - CISA Certified Information Systems Auditor

An organization is using symmetric encryption. Which of the following would be a valid reason for moving to asymmetric encryption? Symmetric encryption:

A. provides authenticity.
B. is faster than asymmetric encryption.
C. can cause key management to be difficult.
D. requires a relatively simple algorithm.

Correct Answer: C

Explanation:

Explanation:
In a symmetric algorithm, each pair of users’ needs a unique pair of keys, so the number of keys grows and key management can become overwhelming. Symmetric algorithms do not provide authenticity, and symmetric encryption is faster than asymmetric encryption. Symmetric algorithms require mathematical calculations, but they are not as complex as asymmetric algorithms.