What does a digital signature provide in addition to authenticity and integrity?

Availability of the message at all times.

Confidentiality of the message content.

Non-repudiation, preventing the signer from denying they signed the message.

A security team manages keys for a fleet of IoT devices that use AES-128. They need to rotate keys periodically, but the devices have limited bandwidth and cannot perform a full re-encryption of stored data. What is the most practical approach?

Use the same key for all devices to simplify rotation

Disable rotation to save bandwidth

Use a key hierarchy: encrypt data with a data encryption key (DEK) and wrap the DEK with a key encryption key (KEK) that can be rotated

Rotate the AES key and re-encrypt all data over the network

A company wants to deploy a web application that uses TLS. They need to ensure clients can verify the server's identity without manually trusting the certificate. What should they do?

Publish the private key on the website

Use a symmetric key for the TLS handshake

Generate a self-signed certificate

Obtain a certificate from a public CA that is already trusted by client browsers

What is a digital certificate in the context of PKI?

An encrypted copy of the user's private key.

A password that grants access to a secure system.

A document that binds a public key to an identity and is signed by a trusted CA.

A financial institution sends a contract to a client and wants to prove later that the client agreed to the exact terms. The client signs the document digitally. What does the digital signature provide?

Authenticity, integrity, and non-repudiation

EC-CouncilAssociate C|CISO

Domain 4Objective 6

Encryption ACCISO Practice Questions (Page 5)

Part of the Information Security Core Competencies domain, which makes up ~31% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–25 in this domain), expect 2–3 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

10concepts

Questions 21–25

21foundation · easy
What does a digital signature provide in addition to authenticity and integrity?
Select an answer first
22expert · hard
A security team manages keys for a fleet of IoT devices that use AES-128. They need to rotate keys periodically, but the devices have limited bandwidth and cannot perform a full re-encryption of stored data. What is the most practical approach?
Select an answer first
23application · medium
A company wants to deploy a web application that uses TLS. They need to ensure clients can verify the server's identity without manually trusting the certificate. What should they do?
Select an answer first
24foundation · easy
What is a digital certificate in the context of PKI?
Select an answer first
25application · medium
A financial institution sends a contract to a client and wants to prove later that the client agreed to the exact terms. The client signs the document digitally. What does the digital signature provide?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.