Study. uk . com
  1. Home
  2. All questions
  3. Question 555

CompTIA Security+ study material · question 555 of 611

What is the difference between using an approved algorithm and using a FIPS 140 validated module?

  1. Approved algorithms are always validated by default
  2. There is none; the terms are interchangeable
  3. Validation means the implementation itself has been tested, which is a stronger claim
  4. Validation refers to the key length rather than the code
Show the answer

Answer: C. Validation means the implementation itself has been tested, which is a stronger claim

A correct algorithm implemented badly is still weak, which is what module validation is designed to catch.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 § 2 Authentication Assurance Levels

Challenge yourself on this topic → Study as cards