Which of the following is a basic key-management concept?

• A. Session Hijacking
• B. Data masking
• C. Key generation
• D. User provisioning

Answer: (C)

The essential idea here is creating cryptographic keys. In any key management system, you must generate the keys before they can be used to encrypt or decrypt data. Generating keys securely provides the foundation for all other secret-management tasks, such as distributing keys, storing them safely, rotating them, and revoking them when needed. Without properly created keys, encryption is impossible and the entire security model collapses.

Session hijacking is a type of attack where an attacker takes over an active session, which relates to defense against threats rather than producing or handling keys. Data masking hides or redacts sensitive values to protect data at rest or in use, which is a data-protection technique rather than a key-management action. User provisioning involves creating and managing user accounts and access rights, part of identity and access management rather than cryptographic key management.