ExpertHard1 markMultiple Choice
CPA · Question 58 · Area II: Security
An auditor observes that a company uses 'Symmetric' encryption for transmitting large database backups across a public network. The key exchange is handled via a separate secure channel. Is this appropriate?
An auditor observes that a company uses 'Symmetric' encryption for transmitting large database backups across a public network. The key exchange is handled via a separate secure channel. Is this appropriate?
Answer options:
A.
Yes, symmetric encryption is efficient for large data volumes.
B.
No, asymmetric encryption must be used for all data transmission.
C.
No, encryption is not needed for backups.
D.
Yes, but only if the key is hardcoded in the script.
How to approach this question
Match the algorithm to the use case. Bulk Data = Symmetric (Fast). Key Exchange/Signatures = Asymmetric (Slow but flexible).
Full Answer
A.Yes, symmetric encryption is efficient for large data volumes.✓ Correct
A
Symmetric encryption (like AES-256) is computationally efficient and ideal for large datasets. The challenge is key exchange, but the scenario states this is handled securely. Therefore, the control is appropriate.
Common mistakes
Thinking Asymmetric is 'better' for everything.
Practice the full CPA ISC Practice Exam
82 questions · hints · full answers · grading
More questions from this exam
Q01A CPA is performing a risk assessment for a client that uses a public cloud provider for its core...HardQ02During a walkthrough of a client's change management process, the auditor notes that developers h...HardQ03A service organization provides a real-time transaction processing platform. The service level ag...HardQ04An auditor is reviewing a SQL query used by the finance team to generate a report of all sales tr...HardQ05A healthcare clearinghouse is preparing for a SOC 2® engagement. They utilize a private cloud dep...Hard