Certified Information Systems Auditor (CISA) — Question 565

Which of the following would BEST protect the confidentiality of sensitive data in transit between multiple offices?

Answer options

• A. Digital signatures
• B. Public key infrastructure (PKI)
• C. Hash algorithms
• D. Kerberos

Correct answer: B

Explanation

Public key infrastructure (PKI) is the best choice for protecting the confidentiality of data in transit, as it facilitates secure communication through encryption. Digital signatures, while useful for verifying integrity and authenticity, do not encrypt data. Hash algorithms provide data integrity but do not protect confidentiality, and Kerberos is primarily used for authentication rather than data encryption.