Security through obscurity is generally discouraged because it relies on secrecy of the encryption method.

Prepare for the Network Security (NETSEC) 3 Test with flashcards and multiple choice questions. Each question offers hints and explanations. Get exam-ready efficiently!

Multiple Choice

Security through obscurity is generally discouraged because it relies on secrecy of the encryption method.

Explanation:
Relying on secrecy of the encryption method is not a robust security approach. The idea being tested is that a cryptosystem should remain secure even if the algorithm is known; only the key needs to stay secret. This is Kerckhoffs’s principle: publish the algorithm, rely on key secrecy, and still maintain security. If the method itself is kept secret, a leak or reverse engineering can expose the algorithm and defeat the protection, making the system fragile and hard to audit or update. Obscurity can add a small extra hurdle, but it should not be the main defense. Therefore, the statement is true.

Relying on secrecy of the encryption method is not a robust security approach. The idea being tested is that a cryptosystem should remain secure even if the algorithm is known; only the key needs to stay secret. This is Kerckhoffs’s principle: publish the algorithm, rely on key secrecy, and still maintain security. If the method itself is kept secret, a leak or reverse engineering can expose the algorithm and defeat the protection, making the system fragile and hard to audit or update. Obscurity can add a small extra hurdle, but it should not be the main defense. Therefore, the statement is true.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy