Which of the following is a core component of a cryptographic key management lifecycle?

• A. Password hashing, salting, key exchange, and certificate issuance
• B. Encryption algorithms, cipher modes, key lengths, and hash functions
• C. Key generation, distribution, storage, use, rotation, revocation, archival, destruction, and audit
• D. Key management steps are not defined

Answer: (C)

Key management across the full life of a cryptographic key is what this item is testing. A complete key management lifecycle includes key generation, distribution, storage, use, rotation, revocation, archival, destruction, and audit. That sequence covers everything from creating a key, getting it to the right place securely, and keeping it protected, to using it safely, rotating it to limit risk, revoking it if it’s compromised, preserving it for compliance or historical reasons, destroying it when it’s no longer needed, and recording actions for accountability. This breadth is essential for maintaining confidentiality and integrity of cryptographic operations while ensuring proper governance.

Other options don’t capture the full lifecycle. One focuses on password practices and certificate issuance rather than the end-to-end lifecycle of a cryptographic key. Another lists properties of cryptographic primitives (algorithms, modes, key lengths, hash functions) rather than the management process. The last option claims there are no defined key management steps, which isn’t accurate.