A company is implementing a PKI to issue certificates to its employees for email signing. The security team wants to ensure that only authorized employees receive certificates and that the certificates are trusted by other employees. Which component is essential for establishing this trust?

A key pair generated on the employee's workstation.

A root CA certificate that is distributed to all employees' trust stores.

A certificate revocation list (CRL) that is published daily.

A certificate template that specifies the validity period.

A .NET developer is implementing a document signing feature. The application must prove that a specific user signed a document and that the document was not altered after signing. Which .NET API should the developer use?

System.Security.Cryptography.RSA with SignData and VerifyData methods.

System.Security.Cryptography.HMAC with ComputeHash method.

System.Security.Cryptography.SHA256 with ComputeHash method.

System.Security.Cryptography.Aes with CreateEncryptor and CreateDecryptor methods.

When validating a digital certificate, what does checking the certificate's expiration date ensure?

The certificate's public key matches the private key

The certificate is currently within its validity period

The certificate was issued by a trusted CA

The certificate has not been revoked

A company's web server certificate was compromised. The certificate is still within its validity period. What should the company do to prevent clients from trusting the compromised certificate?

Delete the certificate from the server and continue without TLS.

Revoke the certificate with the CA and issue a new one.

Wait for the certificate to expire.

Reuse the same key pair with a new certificate.

EC-CouncilCertified Application Security Engineer (.NET)

Domain 5Objective 3

Hashing, Digital Signatures, and Digital Certificates CASENET Practice Questions (Page 11)

Part of the Secure Coding: Cryptography domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

12concepts

12 Concepts in This Objective

Hash Functions
Common Hashing Algorithms
Hashing for Data Integrity
Password Hashing
Digital Signatures Overview
Digital Signature Creation and Verification
Digital Signature Algorithms
Digital Certificates Overview
Certificate Authorities and PKI
Certificate Lifecycle
Certificate Validation
Secure Implementation in .NET

Questions 51–54

51application · medium
A company is implementing a PKI to issue certificates to its employees for email signing. The security team wants to ensure that only authorized employees receive certificates and that the certificates are trusted by other employees. Which component is essential for establishing this trust?
Select an answer first
52application · medium
A .NET developer is implementing a document signing feature. The application must prove that a specific user signed a document and that the document was not altered after signing. Which .NET API should the developer use?
Select an answer first
53foundation · easy
When validating a digital certificate, what does checking the certificate's expiration date ensure?
Select an answer first
54application · medium
A company's web server certificate was compromised. The certificate is still within its validity period. What should the company do to prevent clients from trusting the compromised certificate?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CASENET

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASENET” is a trademark of its owner, used for identification only.