Encryption and Key Management Questions

Covers cryptography fundamentals and practical key lifecycle management for data in transit and at rest. Expect questions on symmetric versus asymmetric encryption, commonly used algorithms and standards, TLS fundamentals, authenticated encryption, envelope encryption, cloud key management services, hardware security modules, key rotation and revocation strategies, access controls and auditing for keys, integration with secrets stores, and operational trade offs around performance and complexity. Candidates should be able to explain mitigation strategies for key compromise and patterns for securely handling encryption in distributed systems.