Which of the following is a common use of a cryptographic hash function?

Generating a public-private key pair.

Ensuring data integrity by detecting changes to the data.

Encrypting data for confidentiality during transmission.

Providing non-repudiation for digital signatures.

How do data protection laws, such as GDPR, influence an organization's encryption policies?

They mandate the use of a specific encryption algorithm.

They prohibit the use of encryption for personal data.

They require all encryption keys to be stored in a public registry.

They require organizations to implement appropriate technical measures, including encryption, to protect personal data.

A multinational company stores personal data of EU citizens in a cloud database. To comply with GDPR, they must ensure that data is protected and that transfers outside the EU are lawful. What is the most appropriate encryption-related measure?

Encrypt the data with a key stored only in the EU

Encrypt the data at rest and in transit, and use a GDPR-compliant transfer mechanism

Disable encryption to avoid export controls

What is the primary purpose of encrypting data at rest?

To protect data stored on disk or in databases from unauthorized access.

To protect data while it is being transmitted over a network.

To ensure data is available at all times.

A company uses AES-256 to encrypt backup tapes. The security policy requires that if a tape is lost, the data must remain unreadable. Which key management practice is most critical to ensure this?

Store the key separately from the tapes

Share the key with the backup vendor

EC-CouncilAssociate C|CISO

Domain 4Objective 6

Encryption ACCISO Practice Questions (Page 1)

Part of the Information Security Core Competencies domain, which makes up ~31% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–25 in this domain), expect 2–3 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

10concepts

Questions 1–5

1foundation · easy
Which of the following is a common use of a cryptographic hash function?
Select an answer first
2foundation · easy
How do data protection laws, such as GDPR, influence an organization's encryption policies?
Select an answer first
3application · medium
A multinational company stores personal data of EU citizens in a cloud database. To comply with GDPR, they must ensure that data is protected and that transfers outside the EU are lawful. What is the most appropriate encryption-related measure?
Select an answer first
4foundation · easy
What is the primary purpose of encrypting data at rest?
Select an answer first
5application · medium
A company uses AES-256 to encrypt backup tapes. The security policy requires that if a tape is lost, the data must remain unreadable. Which key management practice is most critical to ensure this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.