Academy Login

Weekly CISSP Practice

Exam Questions

Week 41 - Question 2

Which of the following provides the strongest form of encryption?

A. DES
B. 3DES
C. AES
D. RC4

Answer: C. AES

Explanation:

A. DES (Data Encryption Standard)

DES was the federal standard for decades, but it is now considered insecure.  

  •  The Weakness: It uses a tiny 56-bit key.  With modern computing power, a 56-bit key can be "brute-forced" (trying every possible combination) in a matter of hours.  

  • The Type: It is a Block Cipher that processes data in 64-bit blocks.  

B. 3DES (Triple DES)

3DES was created as a "stop-gap" measure to extend the life of DES hardware.

  •  How it works: It runs the DES algorithm three times on every block of data.  While it is significantly more secure than standard DES, it is very inefficient (slow) because it performs triple the work.  

  • The Status: It is currently being retired and is not recommended for new applications.

C. AES (Advanced Encryption Standard)

AES is the gold standard for symmetric encryption today, used by governments and corporations worldwide.  

  • The Strength: It supports key lengths of 128, 192, and 256 bits. A 256-bit key is so strong that it is considered "quantum-resistant" for the foreseeable future.  

  • The Mechanism: It is a symmetric Block Cipher based on the Rijndael algorithm, processing data in 128-bit blocks. It is highly efficient in both hardware and software.  

D. RC4 (Rivest Cipher 4)

RC4 is a Stream Cipher, meaning it encrypts data bit-by-bit or byte-by-byte rather than in blocks.  

  • The History: It was widely used in early Wi-Fi security (WEP) and SSL.

  • The Verdict: It contains multiple mathematical vulnerabilities (biases) that allow attackers to recover the plaintext. It is now prohibited in modern TLS configurations.

Podcasts

Check out my weekly podcasts that delve deep into the relevant topics related to each of CISSP domains. In addition, I will go over specific questions and they can be interpreted and answered.

Listen Podcasts

CISSP Cyber Training Academy

Tired of not knowing how to study for the CISSP Exam? 

Check out the CISSP Cyber Training Academy to help you on your journey!

Learn about the Academy!

CISSP Cyber Training - YouTube

Check out my video collection on YouTube discussing all the details needed to help you pass the CISSP exam.   

Check out channel