CISSP Practice Question: An auditor identifies outdated encryption for data at rest. Which algorithm should…

Correct Answer: B. Advanced Encryption Standard (AES)

Explanation (CISSP Manager Logic):

AES is the global industry standard for symmetric encryption, providing the optimal balance of performance, scalability, and high security. It ensures long-term data confidentiality and regulatory compliance while maintaining broad compatibility across modern enterprise ecosystems.

By implementing AES, you:

• Mitigate brute-force risks using robust key lengths up to 256 bits.
• Ensure high-speed performance with low computational overhead.
• Align with NIST standards and international data protection requirements.

While the other options are relevant, they fall short because:

• A: 3DES is being phased out due to slow performance and vulnerability to Sweet32 attacks.
• C: DES is cryptographically broken as its 56-bit key can be cracked in hours.
• D: RC2 is a legacy block cipher with known vulnerabilities and is no longer considered secure.

Think like a manager:

Prioritize globally recognized, standardized solutions to ensure long-term support and interoperability. Selecting deprecated algorithms introduces technical debt and unacceptable risk to the organization.