A system administrator wants to verify that a configuration file has not been altered since it was deployed. They have the original hash value. What should they do?

Compute the current hash of the file and compare it to the original

Encrypt the file with a symmetric key and compare the ciphertext

In asymmetric encryption, what is the relationship between the public key and the private key?

The public key is derived from the private key each time it is used.

They are identical keys that are shared between parties.

They are mathematically related, but the private key cannot be feasibly derived from the public key.

The private key is encrypted with the public key for secure storage.

A security team is designing a password storage system. They want to protect against brute-force attacks and rainbow table attacks. Which approach is most effective?

Encrypt passwords with AES and store the key in the application

Use a slow, salted hash function like bcrypt or Argon2

Use a fast hash like SHA-256 with a global salt

Store passwords in plaintext for performance

A security analyst notices that a user's TLS session to a banking website is being intercepted. The user's browser does not show a certificate warning. Which attack is most likely occurring?

A brute-force attack on the TLS session key

A man-in-the-middle attack using a rogue CA certificate installed on the user's device

A side-channel attack on the user's keyboard

EC-CouncilAssociate C|CISO

Domain 4Objective 6

Encryption ACCISO Practice Questions (Page 7)

Part of the Information Security Core Competencies domain, which makes up ~31% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–25 in this domain), expect 2–3 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

10concepts

Questions 31–35

31application · medium
A system administrator wants to verify that a configuration file has not been altered since it was deployed. They have the original hash value. What should they do?
Select an answer first
32foundation · easy
In asymmetric encryption, what is the relationship between the public key and the private key?
Select an answer first
33expert · hard
A security team is designing a password storage system. They want to protect against brute-force attacks and rainbow table attacks. Which approach is most effective?
Select an answer first
34expert · hard
A security analyst notices that a user's TLS session to a banking website is being intercepted. The user's browser does not show a certificate warning. Which attack is most likely occurring?
Select an answer first
35foundation · easy
Which phase in the cryptographic key lifecycle involves securely providing a key to authorized parties?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.