A software vendor distributes a firmware update file. They want to ensure that customers can verify the file has not been tampered with and that it genuinely came from the vendor. Which combination of actions should the vendor take?

Encrypt the file with AES-256 and share the key over email.

Sign the SHA-256 hash of the file with the vendor's private key and distribute the signature along with the file.

Publish the SHA-256 hash of the file on the vendor's website.

Encrypt the file with the vendor's private key and publish the public key.

What is the primary purpose of key escrow?

To securely store a copy of a key with a trusted third party for recovery

To generate new keys automatically

To distribute keys to multiple recipients

Which of the following best describes the core goal of non-repudiation in cryptography?

Providing proof that a specific party performed a specific action

Ensuring that data is not altered during transmission

Verifying that a user is who they claim to be

Preventing unauthorized parties from reading the content of a message

EC-CouncilCertified Cybersecurity Technician

Domain 5Objective 1

Cryptography CCT Practice Questions (Page 3)

Part of the Cryptography and Data Security domain, which makes up ~9% of our current practice bank.

45questions here

9free pages

8concepts

Questions 11–15

11foundation · easy
In asymmetric encryption, which key is used to decrypt a message that was encrypted with the recipient's public key?
Select an answer first
12application · medium
A security analyst needs to verify that a downloaded firmware image has not been corrupted during transmission. The vendor provides a hash value. Which property of the hash function makes this verification possible?
Select an answer first
13application · medium
A software vendor distributes a firmware update file. They want to ensure that customers can verify the file has not been tampered with and that it genuinely came from the vendor. Which combination of actions should the vendor take?
Select an answer first
14foundation · easy
What is the primary purpose of key escrow?
Select an answer first
15foundation · easy
Which of the following best describes the core goal of non-repudiation in cryptography?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Cryptography CCT Practice Questions (Page 3)

Questions 11–15

In asymmetric encryption, which key is used to decrypt a message that was encrypted with the recipient's public key?

A security analyst needs to verify that a downloaded firmware image has not been corrupted during transmission. The vendor provides a hash value. Which property of the hash function makes this verification possible?

A software vendor distributes a firmware update file. They want to ensure that customers can verify the file has not been tampered with and that it genuinely came from the vendor. Which combination of actions should the vendor take?

What is the primary purpose of key escrow?

Which of the following best describes the core goal of non-repudiation in cryptography?

Keep studying — Cryptography and Data Security