A developer is implementing encryption for a messaging application. The application must ensure that messages cannot be tampered with during transmission. Which combination of algorithms should the developer use?

RSA for encryption and MD5 for integrity

AES-ECB for encryption and SHA-256 for integrity

DES for encryption and a simple checksum

AES-GCM for encryption and authentication

A security administrator is rotating keys for a database that uses AES-256 encryption. The database is large and cannot be re-encrypted during business hours. What is the best practice to rotate the key without re-encrypting the data?

Decrypt and re-encrypt the entire database with the new key

Change the encryption algorithm to a new one

Store the old key and new key in the same key management system

Use envelope encryption: wrap the data encryption key with a new key encryption key

What is the purpose of padding in block cipher encryption?

To ensure the plaintext is a multiple of the block size.

To compress the data before encryption.

To increase the strength of the encryption algorithm.

What is a common weakness that can make encryption vulnerable to attack?

Using a unique initialization vector (IV) for each encryption.

Using a strong, randomly generated key.

Using a well-known encryption algorithm.

EC-CouncilAssociate C|CISO

Domain 4Objective 6

Encryption ACCISO Practice Questions (Page 2)

Part of the Information Security Core Competencies domain, which makes up ~31% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–25 in this domain), expect 2–3 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

10concepts

Questions 6–10

6application · medium
A developer is implementing encryption for a messaging application. The application must ensure that messages cannot be tampered with during transmission. Which combination of algorithms should the developer use?
Select an answer first
7foundation · easy
Which of the following is a common symmetric encryption algorithm?
Select an answer first
8application · medium
A security administrator is rotating keys for a database that uses AES-256 encryption. The database is large and cannot be re-encrypted during business hours. What is the best practice to rotate the key without re-encrypting the data?
Select an answer first
9foundation · easy
What is the purpose of padding in block cipher encryption?
Select an answer first
10foundation · easy
What is a common weakness that can make encryption vulnerable to attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.