Which scenario is a typical use case for asymmetric encryption?

Securely exchanging a session key over an untrusted network

Encrypting data at rest on a local disk

Encrypting a large database file stored on a server

Streaming video content over a secure channel

A Java developer is building a mobile banking app that must encrypt transaction data before sending it to the backend. The app runs on low-power devices, and the security policy requires forward secrecy for the session. Which algorithm combination should the developer choose for the TLS handshake?

RSA key exchange and AES-CBC for bulk encryption

ECC for bulk encryption and RSA for key exchange

ECDHE for key exchange and AES-GCM for bulk encryption

Static Diffie-Hellman and 3DES for bulk encryption

Two Java applications need to exchange encrypted messages over a network. They already share a pre-shared AES key. The security team wants to add authentication to ensure that messages are not tampered with. Which approach should be used?

Use AES-CBC and append a SHA-256 hash of the plaintext.

Use RSA to sign each message before encryption.

Use AES-GCM, which provides both encryption and authentication.

Use DES in ECB mode with a checksum.

Which statement correctly compares symmetric and asymmetric encryption?

Symmetric encryption is slower because it uses longer keys.

Asymmetric encryption is generally faster than symmetric encryption.

Symmetric encryption is generally faster than asymmetric encryption.

Both are equally fast for large data.

A Java application must encrypt data in transit between two servers. The security team requires that the encryption algorithm be resistant to quantum computing attacks. Which algorithm should be chosen?

Use AES-256 with a sufficiently long key.

EC-CouncilCertified Application Security Engineer (Java)

Domain 5Objective 1

Symmetric and Asymmetric Encryption CASEJAVA Practice Questions (Page 5)

Part of the Secure Coding: Cryptography domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 2–3 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

5concepts

Questions 21–25

21foundation · easy
Which scenario is a typical use case for asymmetric encryption?
Select an answer first
22application · medium
A Java developer is building a mobile banking app that must encrypt transaction data before sending it to the backend. The app runs on low-power devices, and the security policy requires forward secrecy for the session. Which algorithm combination should the developer choose for the TLS handshake?
Select an answer first
23application · medium
Two Java applications need to exchange encrypted messages over a network. They already share a pre-shared AES key. The security team wants to add authentication to ensure that messages are not tampered with. Which approach should be used?
Select an answer first
24foundation · easy
Which statement correctly compares symmetric and asymmetric encryption?
Select an answer first
25expert · hard
A Java application must encrypt data in transit between two servers. The security team requires that the encryption algorithm be resistant to quantum computing attacks. Which algorithm should be chosen?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CASEJAVA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASEJAVA” is a trademark of its owner, used for identification only.