CISSP Practice Question: A security manager is updating a PKI policy to address quantum computing…

Correct Answer: B. Transition to cryptographic algorithms specifically designed for post-quantum security

Explanation (CISSP Manager Logic):

In preparing for future quantum computing capabilities, which are expected to break many current cryptographic systems, it is crucial to adopt cryptographic solutions that are fundamentally designed to resist quantum attacks. Post-Quantum Cryptography (PQC) includes algorithms that are believed to be secure against quantum computer attacks, unlike standard asymmetric methods like RSA and ECC, which are vulnerable to Shor's Algorithm【4:6†source】.

By transitioning to post-quantum algorithms, you:

• Ensure long-term confidentiality of data even when quantum computers mature and are able to break existing cryptographic systems.
• Align with emerging standards that industries are developing for cryptographic agility.
• Mitigate "harvest now, decrypt later" threats by shifting to cryptographic systems that maintain confidentiality even in the event of a future quantum threat.

While the other options are relevant, they fall short because:

• A: Increasing RSA key lengths provides temporary security but is not resistant to quantum threats.
• C: PFS is valuable for securing data in transit but does not inherently solve the issue of data stored for the long-term against quantum attacks.
• D: AES-256 is relatively resistant to quantum attacks due to its symmetric nature against Grover’s algorithm but is not a complete solution without complementing asymmetric post-quantum measures【4:12†source】.

Think like a manager:

Strategic decisions should focus on upgrading to cryptographic systems specifically engineered for security in a post-quantum era, ensuring data remains secure throughout the data lifecycle.