A company's internal CA has been compromised. The company uses certificates for internal web applications and VPN. What is the most immediate and critical action to mitigate the compromise?

Revoke all certificates issued by the compromised CA and publish a CRL

Disable all certificate validation on internal applications

Generate a new CA key pair and issue new certificates to all servers

Encrypt all internal traffic with a symmetric key

A company is deploying a new web application that handles sensitive customer data. They need to protect data in transit and at rest. Which combination of controls is most appropriate?

Only TLS for both in-transit and at-rest

IPsec for at-rest and TLS for in-transit

TLS for in-transit and AES-256 for at-rest encryption

AES-256 for in-transit and TLS for at-rest

A legal department requires proof that a specific employee approved a contract. The employee has a digital certificate. What should the employee do to provide non-repudiation?

Sign the contract hash with their private key

Hash the contract and send the hash to the legal department

Encrypt the contract with the legal department's public key

Encrypt the contract with their public key

Two offices need to exchange encrypted files over the internet. They want to use a symmetric algorithm for speed, but they need a secure way to share the key. What is the best approach?

Use only asymmetric encryption for the files

Use asymmetric encryption to exchange a symmetric session key

Use the same symmetric key for all files without rotation

Email the symmetric key to the other office

EC-CouncilAssociate C|CISO

Domain 4Objective 6

Encryption ACCISO Practice Questions (Page 8)

Part of the Information Security Core Competencies domain, which makes up ~31% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–25 in this domain), expect 2–3 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

10concepts

Questions 36–40

36expert · hard
A company's internal CA has been compromised. The company uses certificates for internal web applications and VPN. What is the most immediate and critical action to mitigate the compromise?
Select an answer first
37expert · hard
A company is deploying a new web application that handles sensitive customer data. They need to protect data in transit and at rest. Which combination of controls is most appropriate?
Select an answer first
38application · medium
A legal department requires proof that a specific employee approved a contract. The employee has a digital certificate. What should the employee do to provide non-repudiation?
Select an answer first
39application · medium
Two offices need to exchange encrypted files over the internet. They want to use a symmetric algorithm for speed, but they need a secure way to share the key. What is the best approach?
Select an answer first
40foundation · easy
Which block cipher mode of operation is considered insecure because identical plaintext blocks produce identical ciphertext blocks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.