CompTIA Security+ (SY0-501) — Question 386

A software development company needs to share information between two remote servers, using encryption to protect it. A programmer suggests developing a new encryption protocol, arguing that using an unknown protocol with secure, existing cryptographic algorithm libraries will provide strong encryption without being susceptible to attacks on other known protocols.
Which of the following summarizes the BEST response to the programmer's proposal?

Answer options

• A. The newly developed protocol will only be as secure as the underlying cryptographic algorithms used.
• B. New protocols often introduce unexpected vulnerabilities, even when developed with otherwise secure and tested algorithm libraries.
• C. A programmer should have specialized training in protocol development before attempting to design a new encryption protocol.
• D. The obscurity value of unproven protocols against attacks often outweighs the potential for introducing new vulnerabilities.

Correct answer: B

Explanation

The correct answer is B because new protocols can often introduce unforeseen weaknesses, regardless of the security of the underlying algorithms. While A is true, it does not address the unique risks associated with developing new protocols. C, while valid, does not directly respond to the security concerns raised, and D incorrectly implies that untested protocols can be safer than established ones.