A security auditor is reviewing a .NET application that stores file hashes in a database to detect unauthorized modifications. The application uses SHA-1. The auditor recommends upgrading to SHA-256. The developer is concerned about the migration effort. Which statement accurately describes the migration requirement?

Existing SHA-1 hashes must be recomputed from the original files using SHA-256, and the database must be updated.

The application can continue using SHA-1 for existing files and use SHA-256 only for new files.

The migration is unnecessary because SHA-1 is still secure for integrity checking.

The developer can convert SHA-1 hashes to SHA-256 by applying SHA-256 to the existing hash value.

What is the primary purpose of a digital certificate?

To bind a public key to the identity of an entity

To store the private key of the certificate holder

To provide a backup of the certificate holder's password

To encrypt all data transmitted between two parties

A financial services company downloads a monthly regulatory update file from a government portal. The portal publishes a SHA-256 hash of the file on its HTTPS website. The company's security team wants to verify that the downloaded file has not been tampered with during transit. Which action best achieves this verification?

Re-download the file over a VPN connection and assume the VPN guarantees the file's integrity.

Compute the SHA-256 hash of the downloaded file and compare it to the hash published on the portal.

Verify the file's size and modification date match the values shown on the portal's download page.

Check the file's digital signature using the portal's public certificate, which is embedded in the file.

A .NET application downloads a configuration file from a remote server over HTTPS. The file is not signed, but the server provides a SHA-256 hash on a different HTTPS page. The security team wants to ensure the file has not been tampered with. The developer notes that both pages are served from the same server. Which additional measure would best strengthen the integrity verification?

Cache the hash locally after the first download and compare on subsequent downloads.

Verify the file's digital signature using the server's TLS certificate.

Fetch the hash from a separate, independently controlled source, such as a different server or a published digest in a security bulletin.

Use a longer hash algorithm, such as SHA-512, instead of SHA-256.

EC-CouncilCertified Application Security Engineer (.NET)

Domain 5Objective 3

Hashing, Digital Signatures, and Digital Certificates CASENET Practice Questions (Page 10)

Part of the Secure Coding: Cryptography domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

12concepts

12 Concepts in This Objective

Hash Functions
Common Hashing Algorithms
Hashing for Data Integrity
Password Hashing
Digital Signatures Overview
Digital Signature Creation and Verification
Digital Signature Algorithms
Digital Certificates Overview
Certificate Authorities and PKI
Certificate Lifecycle
Certificate Validation
Secure Implementation in .NET

Questions 46–50

46expert · hard
A security auditor is reviewing a .NET application that stores file hashes in a database to detect unauthorized modifications. The application uses SHA-1. The auditor recommends upgrading to SHA-256. The developer is concerned about the migration effort. Which statement accurately describes the migration requirement?
Select an answer first
47foundation · easy
What is the primary purpose of a digital certificate?
Select an answer first
48application · medium
A financial services company downloads a monthly regulatory update file from a government portal. The portal publishes a SHA-256 hash of the file on its HTTPS website. The company's security team wants to verify that the downloaded file has not been tampered with during transit. Which action best achieves this verification?
Select an answer first
49expert · hard
A .NET application downloads a configuration file from a remote server over HTTPS. The file is not signed, but the server provides a SHA-256 hash on a different HTTPS page. The security team wants to ensure the file has not been tampered with. The developer notes that both pages are served from the same server. Which additional measure would best strengthen the integrity verification?
Select an answer first
50foundation · easy
Which property of a cryptographic hash function ensures that it is computationally infeasible to find any two distinct inputs that produce the same output?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CASENET

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASENET” is a trademark of its owner, used for identification only.

Hashing, Digital Signatures, and Digital Certificates CASENET Practice Questions (Page 10)

Questions 46–50

What is the primary purpose of a digital certificate?

Which property of a cryptographic hash function ensures that it is computationally infeasible to find any two distinct inputs that produce the same output?

Keep studying — Secure Coding: Cryptography