What is the purpose of key rotation in cryptographic key management?

To make the key easier to remember.

To increase the length of the key.

To limit the amount of data encrypted with a single key.

To allow multiple users to share the same key.

A financial institution must retain encrypted customer data for seven years to meet regulatory requirements. The encryption keys are stored on a hardware security module (HSM). What is the most appropriate key lifecycle action to align with the retention period?

Archive the key in a software vault without expiration

Set the key's expiration date to seven years from creation

Rotate the key every 30 days and delete the old keys immediately

Destroy the key at the end of each fiscal year

A global company must comply with data protection laws that require encryption of personal data. They are considering using a cloud provider's encryption services. Which factor is most important to ensure compliance?

The provider's default encryption settings

The ability to control and audit key access and usage

The speed of the encryption algorithm

The cost of the encryption service

A software vendor distributes a signed update file. The vendor's public key is embedded in a certificate issued by a well-known CA. To verify the authenticity and integrity of the update, what should the recipient do first?

Verify the certificate chain up to a trusted root CA

Hash the vendor's public key and compare it to the signature

Use the vendor's public key to encrypt a challenge to the vendor

Decrypt the update file with the vendor's public key

EC-CouncilAssociate C|CISO

Domain 4Objective 6

Encryption ACCISO Practice Questions (Page 11)

Part of the Information Security Core Competencies domain, which makes up ~31% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–25 in this domain), expect 2–3 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

10concepts

Questions 51–54

51foundation · easy
What is the purpose of key rotation in cryptographic key management?
Select an answer first
52application · medium
A financial institution must retain encrypted customer data for seven years to meet regulatory requirements. The encryption keys are stored on a hardware security module (HSM). What is the most appropriate key lifecycle action to align with the retention period?
Select an answer first
53expert · hard
A global company must comply with data protection laws that require encryption of personal data. They are considering using a cloud provider's encryption services. Which factor is most important to ensure compliance?
Select an answer first
54application · medium
A software vendor distributes a signed update file. The vendor's public key is embedded in a certificate issued by a well-known CA. To verify the authenticity and integrity of the update, what should the recipient do first?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.