Which of the following conditions would be of MOST concern to an IS auditor assessing the risk of a successful brute force attack encrypted data at rest?

exams CISA CISA exam 0 Comments

Which of the following conditions would be of MOST concern to an IS auditor assessing the risk of a successful brute force attack encrypted data at rest?
A . Use of symmetric encryption
B . Use of asymmetric encryption
C . Random key generation
D . Short key length

Answer: D