A small organization wants to encrypt files stored on a shared network drive. They need to manage access for multiple users and revoke access for a single user without re-encrypting all files. Which cryptographic approach is most suitable?

Use asymmetric encryption where each file is encrypted with a unique symmetric key, and that key is encrypted with each user's public key.

Use a symmetric key to encrypt files and share the key with all authorized users.

Use a hash of the file as the encryption key.

Use a single asymmetric key pair for all users, with the private key stored on the server.

A software vendor distributes a firmware update. To let customers verify that the update is authentic and has not been tampered with, the vendor publishes a hash of the update file. Which additional step is required to provide non-repudiation?

Encrypt the hash with a symmetric key shared with all customers.

Include a timestamp from a public time server in the hash value.

Sign the hash with the vendor's private key and publish the signature alongside the hash.

Publish the hash on the vendor's website using HTTPS.

A financial institution is migrating to a new key management system. They have a requirement that all encryption keys must be backed up, but they also have a security policy that keys must be protected from unauthorized access. They are considering using a key escrow service. What is the primary trade-off they must consider?

Key escrow ensures that keys are never lost, but it also makes key recovery impossible.

Key escrow provides backup but introduces a third party that could be compromised or subpoenaed.

Key escrow is only applicable to symmetric keys.

Key escrow eliminates the need for key rotation.

What is the primary purpose of key rotation in cryptographic systems?

To increase the speed of encryption

To make the key easier to remember

To limit the amount of data encrypted with a single key

EC-CouncilBlockchain Developer Certification

Domain 2Objective 1

Cryptographic Principles BDC Practice Questions (Page 1)

Part of the Cryptography and Security Foundations domain, which makes up ~10% of our current practice bank.

37questions here

8free pages

6concepts

Questions 1–5

1foundation · easy
Which application of a cryptographic hash function is used to verify that a file has not been altered during transmission?
Select an answer first
2application · medium
A small organization wants to encrypt files stored on a shared network drive. They need to manage access for multiple users and revoke access for a single user without re-encrypting all files. Which cryptographic approach is most suitable?
Select an answer first
3application · medium
A software vendor distributes a firmware update. To let customers verify that the update is authentic and has not been tampered with, the vendor publishes a hash of the update file. Which additional step is required to provide non-repudiation?
Select an answer first
4expert · hard
A financial institution is migrating to a new key management system. They have a requirement that all encryption keys must be backed up, but they also have a security policy that keys must be protected from unauthorized access. They are considering using a key escrow service. What is the primary trade-off they must consider?
Select an answer first
5foundation · easy
What is the primary purpose of key rotation in cryptographic systems?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to BDC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “BDC” is a trademark of its owner, used for identification only.

Cryptographic Principles BDC Practice Questions (Page 1)

Questions 1–5

Which application of a cryptographic hash function is used to verify that a file has not been altered during transmission?

A small organization wants to encrypt files stored on a shared network drive. They need to manage access for multiple users and revoke access for a single user without re-encrypting all files. Which cryptographic approach is most suitable?

A software vendor distributes a firmware update. To let customers verify that the update is authentic and has not been tampered with, the vendor publishes a hash of the update file. Which additional step is required to provide non-repudiation?

What is the primary purpose of key rotation in cryptographic systems?

Keep studying — Cryptography and Security Foundations