hardMultiple SelectObjective-mapped
CISSP Practice Question: Which THREE of the following are examples of…
Which THREE of the following are examples of asymmetric cryptographic algorithms? (Select THREE.)
⚠ Common exam trap
Many candidates confuse symmetric ciphers like AES and Blowfish with asymmetric algorithms because they are both used for encryption, but the key management difference is the defining characteristic tested in CISSP.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Elliptic Curve Cryptography (ECC)
Elliptic Curve Cryptography (ECC) is an asymmetric cryptographic algorithm that uses the algebraic structure of elliptic curves over finite fields to provide security with smaller key sizes compared to RSA. It relies on the Elliptic Curve Discrete Logarithm Problem (ECDLP) for its security, making it computationally infeasible to derive the private key from the public key. ECC is widely used in modern protocols such as TLS, SSH, and Bitcoin for key exchange and digital signatures.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Elliptic Curve Cryptography (ECC)
Why this is correct
Elliptic Curve Cryptography (ECC) is a modern asymmetric cryptographic algorithm that leverages the mathematical properties of elliptic curves over finite fields to generate public and private key pairs. Its security is predicated on the computational difficulty of the Elliptic Curve Discrete Logarithm Problem (ECDLP). ECC offers equivalent security strength with significantly smaller key sizes compared to RSA, making it highly efficient for resource-constrained devices and mobile applications.
- ✓
Diffie-Hellman
Why this is correct
Diffie-Hellman is a foundational asymmetric key exchange protocol that enables two parties to securely establish a shared secret key over an insecure communication channel without prior shared secrets. While it does not directly provide encryption or digital signatures, it is crucial for securely deriving symmetric session keys. The protocol's security relies on the computational difficulty of the discrete logarithm problem.
- ✗
AES
Why it's wrong here
Advanced Encryption Standard (AES) is a widely adopted symmetric block cipher, meaning it utilizes the same secret key for both encrypting and decrypting data. It operates on fixed-size blocks of 128 bits and employs a series of substitution, permutation, and mixing operations across multiple rounds to transform plaintext into ciphertext. AES is known for its high security, efficiency, and widespread use in various security protocols.
- ✓
RSA
Why this is correct
RSA (Rivest-Shamir-Adleman) is a prominent asymmetric cryptographic algorithm widely used for both secure data encryption and digital signatures. Its security is based on the practical difficulty of factoring the product of two large prime numbers. RSA uses a public key for encryption and signature verification, while a corresponding private key is used for decryption and signature generation, ensuring confidentiality and authenticity.
- ✗
Blowfish
Why it's wrong here
Blowfish is a symmetric block cipher designed by Bruce Schneier, operating on 64-bit blocks of data with a variable key length ranging from 32 to 448 bits. As a symmetric algorithm, it requires both the sender and receiver to possess the identical secret key for secure communication. Blowfish is recognized for its speed and efficiency, particularly in software implementations, but it is not an asymmetric algorithm.
Quick reference
Symmetric Encryption Algorithm Comparison
| Algorithm | Key Size | Block Size | Status | Notes |
|---|---|---|---|---|
| AES-128 | 128-bit | 128-bit | Current standard | NIST approved; WPA3, TLS |
| AES-256 | 256-bit | 128-bit | Current standard | Preferred for sensitive / govt data |
| 3DES | 112-bit effective | 64-bit | Deprecated (2023) | Replaced by AES |
| DES | 56-bit | 64-bit | Broken | Cracked in < 24 h; never deploy |
| ChaCha20 | 256-bit | Stream cipher | Current | TLS 1.3, WireGuard |
Go deeper
Related to this question
Learn chapter
Security Governance and Principles
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
TLS
Transport Layer Security (TLS) is a cryptographic protocol that encrypts data sent over the internet to keep it private and ensure it hasn’t been tampered with.
About these practice questions
One of 747 original CISSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISSP exam.