What is the primary role of the CryptoStream class in .NET?

To generate cryptographic keys from a password

To link a data stream with a cryptographic transformation so data can be encrypted or decrypted as it is read or written

A .NET application must sign a large file (several gigabytes) with RSA. The developer is concerned about memory usage and performance. Which approach should be used to sign the file?

Use a MemoryStream to hold the file and sign the stream

Use RSA to encrypt the file and then sign the encrypted data

Hash the file in chunks using a CryptoStream and sign the hash with RSA

Load the entire file into a byte array and sign it directly

A developer is generating a cryptographic nonce for a protocol. They want to use the modern API for cryptographic random number generation. Which code snippet correctly generates 16 random bytes?

var rng = RandomNumberGenerator.Create(); rng.GetBytes(nonce);

var rng = new System.Random(); rng.NextBytes(nonce);

var rng = new RandomNumberGenerator(); rng.GetBytes(nonce);

var rng = new RNGCryptoServiceProvider(); rng.GetNonZeroBytes(nonce);

A developer is implementing a decryption routine that reads from a network stream. The data is encrypted with AES. Which approach should be used to decrypt the stream efficiently?

Use a StreamReader to read the stream and then decrypt the string

Wrap the network stream in a CryptoStream with a decryptor transform

Read the entire stream into a byte array and decrypt it in memory

Use the NetworkStream's Decrypt method

EC-CouncilCertified Application Security Engineer (.NET)

Domain 5Objective 5

.NET Cryptography Namespaces and Class Hierarchy CASENET Practice Questions (Page 5)

Part of the Secure Coding: Cryptography domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

Questions 21–25

21foundation · easy
What is the primary role of the CryptoStream class in .NET?
Select an answer first
22application · medium
A developer is encrypting a stream and wants to use CryptoStream. They have an Aes instance and need to create the transform object to pass to CryptoStream. Which method should they call on the Aes instance?
Select an answer first
23expert · hard
A .NET application must sign a large file (several gigabytes) with RSA. The developer is concerned about memory usage and performance. Which approach should be used to sign the file?
Select an answer first
24application · medium
A developer is generating a cryptographic nonce for a protocol. They want to use the modern API for cryptographic random number generation. Which code snippet correctly generates 16 random bytes?
Select an answer first
25application · medium
A developer is implementing a decryption routine that reads from a network stream. The data is encrypted with AES. Which approach should be used to decrypt the stream efficiently?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CASENET

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASENET” is a trademark of its owner, used for identification only.