A software vendor distributes a firmware update for its network appliances. The vendor wants customers to be able to verify that the update was not tampered with during download. Which cryptographic technique should the vendor use to provide this integrity check?

Encrypt the firmware file with a symmetric key known to all customers.

Compress the firmware file and require customers to check the file size.

Use a cyclic redundancy check (CRC) embedded in the firmware file.

Publish a cryptographic hash of the firmware file on its official website.

A company's web server uses TLS with a certificate from a public CA. An attacker performs a man-in-the-middle attack by presenting a certificate that is not trusted by the browser, but the user clicks through the warning. What is the most effective mitigation to prevent this in the future?

Use a certificate with a longer validity period.

Use a stronger cipher suite for TLS.

Implement HTTP Strict Transport Security (HSTS) and educate users not to bypass certificate warnings.

Which of the following is a primary use of cryptographic hash functions?

Encrypting data for confidentiality

A software vendor signs its releases with a digital signature. A customer discovers that the vendor's private key has been leaked. The vendor reissues a new key pair and signs future releases with the new key. What additional step is necessary to maintain trust for existing customers?

Revoke the old certificate and publish a revocation notice so customers do not trust old signatures.

Use the same certificate but change the private key.

Keep the old certificate valid until it expires naturally to avoid disruption.

Distribute the new public key only to new customers.

EC-CouncilCertified Chief Information Security Officer

Domain 4Objective 6

Encryption CCISO Practice Questions (Page 7)

Part of the Information Security Core Competencies domain, which makes up ~33% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~20–33 in this domain), expect 3–4 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

10concepts

Questions 31–35

31application · medium
A software vendor distributes a firmware update for its network appliances. The vendor wants customers to be able to verify that the update was not tampered with during download. Which cryptographic technique should the vendor use to provide this integrity check?
Select an answer first
32expert · hard
A company's web server uses TLS with a certificate from a public CA. An attacker performs a man-in-the-middle attack by presenting a certificate that is not trusted by the browser, but the user clicks through the warning. What is the most effective mitigation to prevent this in the future?
Select an answer first
33foundation · easy
Which of the following is a primary use of cryptographic hash functions?
Select an answer first
34expert · hard
A software vendor signs its releases with a digital signature. A customer discovers that the vendor's private key has been leaked. The vendor reissues a new key pair and signs future releases with the new key. What additional step is necessary to maintain trust for existing customers?
Select an answer first
35foundation · easy
In a digital signature process, what is encrypted with the signer's private key?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.