What is a key property of a cryptographic hash function?

It is reversible with the correct key.

It produces a variable-length output regardless of input size.

It is computationally infeasible to find two different inputs that produce the same hash.

It encrypts data using a secret key.

An organization operates its own root CA and issues certificates to internal applications. A security audit reveals that the root CA's private key was stored in a software keystore with a weak password. The CISO must decide how to remediate this. Which action is most critical?

Move the root CA key to an HSM without changing the key.

Change the password on the software keystore and continue using the same root CA key.

Revoke only the certificates that are about to expire.

Generate a new root CA key pair, reissue all subordinate CA certificates, and redistribute the new root certificate to all clients.

A security team is investigating a suspected data breach. The team has a copy of the original file and a copy of the file found on the attacker's system. The team wants to prove that the two files are identical without revealing the contents of the original file in court. Which approach should the team use?

Use a digital signature to sign both files and compare the signatures.

Compute a cryptographic hash of both files and compare the digests.

Compare the file sizes and modification timestamps.

Encrypt both files with the same key and compare the ciphertext.

EC-CouncilCertified Chief Information Security Officer

Domain 4Objective 6

Encryption CCISO Practice Questions (Page 5)

Part of the Information Security Core Competencies domain, which makes up ~33% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~20–33 in this domain), expect 3–4 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

10concepts

Questions 21–25

21foundation · easy
What is a key property of a cryptographic hash function?
Select an answer first
22expert · hard
An organization operates its own root CA and issues certificates to internal applications. A security audit reveals that the root CA's private key was stored in a software keystore with a weak password. The CISO must decide how to remediate this. Which action is most critical?
Select an answer first
23expert · hard
A security team is investigating a suspected data breach. The team has a copy of the original file and a copy of the file found on the attacker's system. The team wants to prove that the two files are identical without revealing the contents of the original file in court. Which approach should the team use?
Select an answer first
24foundation · easy
A user wants to send a confidential document over the internet. Which encryption method should be used to protect the document while it is being transmitted?
Select an answer first
25foundation · easy
In asymmetric encryption, which key is used to encrypt a message intended for a specific recipient?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.

Encryption CCISO Practice Questions (Page 5)

Questions 21–25

What is a key property of a cryptographic hash function?

An organization operates its own root CA and issues certificates to internal applications. A security audit reveals that the root CA's private key was stored in a software keystore with a weak password. The CISO must decide how to remediate this. Which action is most critical?

A user wants to send a confidential document over the internet. Which encryption method should be used to protect the document while it is being transmitted?

In asymmetric encryption, which key is used to encrypt a message intended for a specific recipient?

Keep studying — Information Security Core Competencies