A global company needs to comply with data protection laws that require encryption of personal data. They also face export controls on cryptographic software. Which approach balances compliance and legal constraints?

Store all data in one country to avoid transfer rules

Disable encryption for data in transit

Use weak encryption to avoid export controls

Use strong encryption for data at rest and in transit, and review export control classifications for the software used

Which characteristic best describes symmetric encryption?

It uses a key that is derived from the data being encrypted.

It uses the same key for both encryption and decryption.

It uses a different key for each block of data.

It uses a pair of mathematically related keys, one public and one private.

An organization wants to enable secure email between its employees and external partners. They decide to use S/MIME. What must be in place for an employee to send a digitally signed email to a partner?

A shared secret key exchanged out-of-band with each partner

A VPN tunnel between the two email servers

A digital certificate issued by a CA that the partner's email client trusts

A hash of the email encrypted with the partner's public key

What is a key property of a cryptographic hash function?

It produces the same output for different inputs.

It uses a secret key to encrypt data.

It is reversible, allowing the original data to be recovered.

It produces a fixed-size output regardless of the input size.

A developer is implementing encryption for a database column. The application must support equality searches on the encrypted data. Which approach is most appropriate?

Use randomized encryption (e.g., AES-GCM) for the column

Use deterministic encryption (e.g., AES-SIV) for the column

Encrypt the entire database with a single key

Hash the column values and store the hash

EC-CouncilAssociate C|CISO

Domain 4Objective 6

Encryption ACCISO Practice Questions (Page 10)

Part of the Information Security Core Competencies domain, which makes up ~31% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–25 in this domain), expect 2–3 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

10concepts

Questions 46–50

46expert · hard
A global company needs to comply with data protection laws that require encryption of personal data. They also face export controls on cryptographic software. Which approach balances compliance and legal constraints?
Select an answer first
47foundation · easy
Which characteristic best describes symmetric encryption?
Select an answer first
48application · medium
An organization wants to enable secure email between its employees and external partners. They decide to use S/MIME. What must be in place for an employee to send a digitally signed email to a partner?
Select an answer first
49foundation · easy
What is a key property of a cryptographic hash function?
Select an answer first
50expert · hard
A developer is implementing encryption for a database column. The application must support equality searches on the encrypted data. Which approach is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.