An organization is implementing a key management policy. They need to ensure that keys are securely stored and that access is restricted to authorized personnel. Which practice best meets this requirement?

Embed keys in the source code of the application.

Store keys in plain text in a configuration file on the application server.

Email keys to administrators whenever they need to access encrypted data.

Store keys in a hardware security module (HSM) with strict access controls.

An organization wants to set up an internal PKI. They need to issue certificates to employees for email signing and encryption. Which component is essential to issue and manage these certificates?

A key distribution center (KDC)

A hardware security module (HSM)

A company's web server certificate is about to expire. The administrator must replace it without causing downtime for users. Which approach best ensures a seamless transition?

Generate a new key pair and update the certificate without restarting the web service.

Install the new certificate and key on the server, then restart the web service during a low-traffic window.

Wait until the certificate expires, then install the new one.

Use the same certificate and key but change the expiration date in the server configuration.

A development team is building a secure messaging app that needs to encrypt messages between users. They want to avoid the complexity of managing symmetric keys for each pair of users. Which approach best meets this need?

Use a key distribution center to send symmetric keys over the network in plaintext.

Use a hash of the message as the encryption key.

Use a single shared symmetric key for all users.

Use asymmetric encryption where each user has a public/private key pair, and encrypt messages with the recipient's public key.

EC-CouncilCertified Cybersecurity Technician

Domain 5Objective 1

Cryptography CCT Practice Questions (Page 4)

Part of the Cryptography and Data Security domain, which makes up ~9% of our current practice bank.

45questions here

9free pages

8concepts

Questions 16–20

16application · medium
An organization is implementing a key management policy. They need to ensure that keys are securely stored and that access is restricted to authorized personnel. Which practice best meets this requirement?
Select an answer first
17application · easy
An organization wants to set up an internal PKI. They need to issue certificates to employees for email signing and encryption. Which component is essential to issue and manage these certificates?
Select an answer first
18expert · hard
A company's web server certificate is about to expire. The administrator must replace it without causing downtime for users. Which approach best ensures a seamless transition?
Select an answer first
19application · medium
A development team is building a secure messaging app that needs to encrypt messages between users. They want to avoid the complexity of managing symmetric keys for each pair of users. Which approach best meets this need?
Select an answer first
20foundation · easy
Which key management practice involves replacing an existing key with a new one before the old key is compromised?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.