A law firm stores client documents on laptops and mobile devices. The CISO wants to ensure that if a device is lost or stolen, the data cannot be read. Which solution best meets this requirement?

Require users to manually encrypt files before saving them to the device.

Use a BIOS password to prevent unauthorized booting of the device.

Enable full-disk encryption (FDE) with a strong passphrase and ensure the recovery key is stored in a secure enterprise key management system.

Encrypt only the documents folder using a file-level encryption tool.

A company is deploying a new web application that will handle customer payment information. The application will be accessed over the internet. The CISO requires that all data in transit be encrypted and that the server be authenticated to clients. The company already has a public certificate from a well-known CA. Which configuration should the company implement?

Use IPsec in transport mode between the client and the server.

Use SSH tunneling to encrypt the web traffic.

Enable TLS on the web server using the public certificate and configure the server to use a strong cipher suite.

Use PGP to encrypt the HTTP requests and responses.

A company's web application uses TLS to secure client communications. Users are reporting browser warnings that the certificate is not trusted. The certificate was issued by an internal certificate authority (CA) that was recently added to the company's domain. What is the most likely cause of the browser warnings?

The internal CA's root certificate is not installed in the users' trusted root store.

The web server's private key is too short.

The certificate has expired and needs to be renewed.

The certificate is not encrypted with AES-256.

EC-CouncilCertified Chief Information Security Officer

Domain 4Objective 6

Encryption CCISO Practice Questions (Page 9)

Part of the Information Security Core Competencies domain, which makes up ~33% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~20–33 in this domain), expect 3–4 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

10concepts

Questions 41–45

41application · medium
A law firm stores client documents on laptops and mobile devices. The CISO wants to ensure that if a device is lost or stolen, the data cannot be read. Which solution best meets this requirement?
Select an answer first
42expert · hard
A company is deploying a new web application that will handle customer payment information. The application will be accessed over the internet. The CISO requires that all data in transit be encrypted and that the server be authenticated to clients. The company already has a public certificate from a well-known CA. Which configuration should the company implement?
Select an answer first
43foundation · easy
In a cryptographic system, what is the term for the original, readable data that is input into an encryption algorithm?
Select an answer first
44application · medium
A company's web application uses TLS to secure client communications. Users are reporting browser warnings that the certificate is not trusted. The certificate was issued by an internal certificate authority (CA) that was recently added to the company's domain. What is the most likely cause of the browser warnings?
Select an answer first
45foundation · easy
Which encryption approach is most appropriate for protecting data stored on a laptop's hard drive?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.

Encryption CCISO Practice Questions (Page 9)

Questions 41–45

A law firm stores client documents on laptops and mobile devices. The CISO wants to ensure that if a device is lost or stolen, the data cannot be read. Which solution best meets this requirement?

In a cryptographic system, what is the term for the original, readable data that is input into an encryption algorithm?

Which encryption approach is most appropriate for protecting data stored on a laptop's hard drive?

Keep studying — Information Security Core Competencies