CISSP Information Systems Security

Answer: D - Cryptographic keys are an access control measure that uses a private key to encrypt a hash value. This process is used to generate a digital signature to replace the use of passwords. Digital signatures are forms of authentication used in environments that require higher security protection than what is provided by passwords. A private key is a secret value that should be in the possession of only one person. The act of encrypting this value with a private key is called digitally signing a message. A digital signature attached to a message proves the message originated from a specific source and that the message itself was not changed while in transit.