Which of the following is included in the Global System for Mobile Communications (GSM) security framework?
Correct Answer: B
The component that is included in the Global System for Mobile Communications (GSM) security framework is symmetric key cryptography. GSM is a standard for mobile communication that is widely used around the world. GSM provides various services and features, such as voice, data, text, multimedia, roaming, or emergency calls. GSM also provides various security mechanisms and functions, such as authentication, encryption, or integrity. The GSM security framework is a set of specifications or protocols that define the security architecture, components, and procedures of the GSM system. The GSM security framework includes various components, such as the Subscriber Identity Module (SIM), the Authentication Center (AuC), the Equipment Identity Register (EIR), or the ciphering algorithms. The component that is included in the GSM security framework is symmetric key cryptography, which is a type of cryptography that uses the same key or a pair of keys that are mathematically related for both encryption and decryption of data or information.
Symmetric key cryptography is used in the GSM security framework for various purposes, such as encrypting the communication between the mobile station and the base station, generating the authentication and ciphering keys, or deriving the session keys. Symmetric key cryptography can help to ensure the confidentiality, integrity, and authenticity of the data or information in the GSM system, as well as to protect the data or information from various security threats or attacks, such as eavesdropping, interception, or modification. Public-Key Infrastructure (PKI), digital signatures, or biometric authentication are not the components that are included in the GSM security framework, as they are either more related to the asymmetric key cryptography, which is a type of cryptography that uses different keys for encryption and decryption of data or information, or to the identity verification, which is a process of confirming the identity of a person or entity. References: CISSP All-in-One Exam Guide, Eighth Edition, Chapter 6: Secure Network Architecture and Securing Network Components, page 388; CISSP Official (ISC)2 Practice Tests, Third Edition, Domain 4: Communication and Network Security, Question 4.11, page 188.