A healthcare organization transmits patient records between two data centers over the public internet. The data must be protected from eavesdropping and tampering. The network team proposes using IPsec in transport mode. Which additional requirement is essential for this deployment to be effective?

Use IPsec in tunnel mode instead of transport mode to protect the entire IP packet.

Enable IPsec compression to reduce bandwidth usage and improve performance.

Ensure that the IPsec peers use certificates from a trusted CA or a securely exchanged pre-shared key.

Configure a pre-shared key (PSK) that is at least 20 characters long and rotate it monthly.

A mobile app needs to encrypt data before sending it to a server. The development team is deciding between using RSA and ECC for the key exchange. The app runs on low-power devices and must minimize battery usage. Which approach is most appropriate?

Use ECC for key exchange because it provides equivalent security with smaller keys and lower computational overhead.

Use a hybrid approach with RSA for key exchange and AES for data encryption.

Use AES for key exchange because it is faster than asymmetric algorithms.

Use RSA because it is more widely supported and easier to implement.

An organization uses RSA-2048 for its public-key infrastructure. The CISO is concerned about the long-term security of the keys and wants to transition to a more efficient algorithm that provides equivalent security with shorter keys. Which algorithm should the CISO consider?

Elliptic Curve Cryptography (ECC) with a 256-bit key.

What is the role of a certificate authority (CA) in a PKI?

To encrypt all data transmitted over the internet

To issue and digitally sign digital certificates

To perform encryption and decryption on behalf of users

EC-CouncilCertified Chief Information Security Officer

Domain 4Objective 6

Encryption CCISO Practice Questions (Page 3)

Part of the Information Security Core Competencies domain, which makes up ~33% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~20–33 in this domain), expect 3–4 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

10concepts

Questions 11–15

11application · medium
A healthcare organization transmits patient records between two data centers over the public internet. The data must be protected from eavesdropping and tampering. The network team proposes using IPsec in transport mode. Which additional requirement is essential for this deployment to be effective?
Select an answer first
12foundation · easy
Which protocol is commonly used to secure HTTP traffic by providing encryption in transit?
Select an answer first
13expert · hard
A mobile app needs to encrypt data before sending it to a server. The development team is deciding between using RSA and ECC for the key exchange. The app runs on low-power devices and must minimize battery usage. Which approach is most appropriate?
Select an answer first
14application · medium
An organization uses RSA-2048 for its public-key infrastructure. The CISO is concerned about the long-term security of the keys and wants to transition to a more efficient algorithm that provides equivalent security with shorter keys. Which algorithm should the CISO consider?
Select an answer first
15foundation · easy
What is the role of a certificate authority (CA) in a PKI?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.