A legal platform must allow users to sign contracts and later verify that the signature was created by a specific user at a specific time. The platform currently uses simple digital signatures. What additional mechanism is required to provide a trusted timestamp?

Store the signature in a blockchain transaction.

Use a timestamp authority (TSA) that signs the hash of the document along with the current time.

Include the user's system clock time in the signed data.

Use a longer key size for the digital signature.

A security analyst is investigating a potential attack where an attacker intercepts communication between two parties and relays messages, potentially altering them. Which cryptographic mechanism is most effective in preventing this type of attack?

Use a hash function to create a checksum of the message.

Use symmetric encryption with a shared key.

Use digital signatures to authenticate the sender and ensure message integrity.

Which practice is considered a best practice for cryptographic key storage?

Storing keys in a hardware security module (HSM)

Storing keys in plaintext in configuration files

A developer is building a system to store user passwords. They want to ensure that even if the database is leaked, the passwords cannot be easily recovered. Which approach is most appropriate?

Store the passwords in plain text but restrict database access.

Store the passwords encrypted with a symmetric key stored in the application code.

Store a cryptographic hash of each password using a slow, salted hash function.

Store a fast hash of each password without salt.

EC-CouncilBlockchain Developer Certification

Domain 2Objective 1

Cryptographic Principles BDC Practice Questions (Page 2)

Part of the Cryptography and Security Foundations domain, which makes up ~10% of our current practice bank.

37questions here

8free pages

6concepts

Questions 6–10

6expert · hard
A legal platform must allow users to sign contracts and later verify that the signature was created by a specific user at a specific time. The platform currently uses simple digital signatures. What additional mechanism is required to provide a trusted timestamp?
Select an answer first
7application · medium
A security analyst is investigating a potential attack where an attacker intercepts communication between two parties and relays messages, potentially altering them. Which cryptographic mechanism is most effective in preventing this type of attack?
Select an answer first
8foundation · easy
Which practice is considered a best practice for cryptographic key storage?
Select an answer first
9foundation · easy
What does a verifier use to check the authenticity of a digital signature?
Select an answer first
10application · medium
A developer is building a system to store user passwords. They want to ensure that even if the database is leaked, the passwords cannot be easily recovered. Which approach is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to BDC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “BDC” is a trademark of its owner, used for identification only.