A security administrator is configuring a new VPN tunnel between two branch offices. The company requires that the tunnel provide confidentiality and integrity, and the administrator wants to avoid the overhead of a separate integrity algorithm. Which configuration should the administrator choose?

AES in GCM mode with a 256-bit key

3DES in CBC mode with a separate HMAC

AES in ECB mode with a 128-bit key

RSA in OFB mode with a 2048-bit key

A security analyst notices that an attacker is performing a man-in-the-middle attack on a TLS connection by presenting a certificate that is not trusted by the client. The client still proceeds with the connection. What is the most likely reason the attack succeeded?

The attacker used a side-channel attack on the server

The user ignored the certificate warning

The attacker brute-forced the TLS session key

The client's certificate was revoked

A developer is implementing encryption for a database column that stores country codes (e.g., 'US', 'CA'). They plan to use AES in ECB mode. What is the main security risk?

Identical plaintext blocks produce identical ciphertext, revealing patterns

A healthcare organization must encrypt patient records at rest and in transit. They are considering using a cloud provider's key management service (KMS) with customer-managed keys. Which consideration is most important for compliance with data protection regulations?

Using the cloud provider's default encryption with provider-managed keys

Storing keys in the same region as the encrypted data

Ensuring the organization retains control over key access and rotation

Encrypting data only in transit and not at rest

EC-CouncilAssociate C|CISO

Domain 4Objective 6

Encryption ACCISO Practice Questions (Page 4)

Part of the Information Security Core Competencies domain, which makes up ~31% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–25 in this domain), expect 2–3 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

10concepts

Questions 16–20

16expert · hard
A developer is implementing a file encryption feature. They need to encrypt files that are often large and may be accessed randomly. They also want to detect any tampering. Which mode of operation is best suited?
Select an answer first
17application · medium
A security administrator is configuring a new VPN tunnel between two branch offices. The company requires that the tunnel provide confidentiality and integrity, and the administrator wants to avoid the overhead of a separate integrity algorithm. Which configuration should the administrator choose?
Select an answer first
18expert · hard
A security analyst notices that an attacker is performing a man-in-the-middle attack on a TLS connection by presenting a certificate that is not trusted by the client. The client still proceeds with the connection. What is the most likely reason the attack succeeded?
Select an answer first
19application · medium
A developer is implementing encryption for a database column that stores country codes (e.g., 'US', 'CA'). They plan to use AES in ECB mode. What is the main security risk?
Select an answer first
20expert · hard
A healthcare organization must encrypt patient records at rest and in transit. They are considering using a cloud provider's key management service (KMS) with customer-managed keys. Which consideration is most important for compliance with data protection regulations?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.