100-160 Question 39
Single answerA company's IT team is implementing encryption to secure data transmitted between their internal systems and remote users. They need to ensure confidentiality, integrity, and authenticity during data transfer. Which encryption method should they choose for this purpose?
- A
Symmetric encryption with a shared secret key
- B
Asymmetric encryption using public and private keys
- C
Hashing algorithms like SHA-256
- D
Disk-level encryption for stored data
Show answer and explanation
Correct answer: B
Explanation
Asymmetric encryption is ideal for securing data in transit due to its use of public and private key pairs. The public key can be shared openly to encrypt data, while the private key decrypts it. Furthermore, digital signatures verify authenticity and integrity, making it the best choice for secure communication over untrusted networks like the internet.
- A. Incorrect.
Symmetric encryption with a shared secret key can secure data, but it does not inherently provide authenticity because both parties use the same key. Key distribution is also challenging in this scenario.
- B. Correct.
Asymmetric encryption using public and private keys is the best choice for secure communication over untrusted networks. It ensures confidentiality (encrypted with the recipient's public key), integrity, and authenticity (via digital signatures).
- C. Incorrect.
Hashing algorithms like SHA-256 are used for data integrity but do not provide confidentiality or encryption for transmitted data.
- D. Incorrect.
Disk-level encryption is used for securing data at rest, not for securing data in transit or communication between systems.