A company operates a private CA. An employee's private key is suspected of being compromised. The certificate is still valid for another year. What is the most appropriate immediate action?

Wait for the certificate to expire naturally.

Revoke the certificate and add it to the certificate revocation list (CRL).

Reissue the certificate with the same key pair.

Increase the certificate's validity period to avoid reissuance.

A small company uses a legacy application that only supports 3DES for encrypting data at rest. The security team wants to migrate to a modern symmetric algorithm without changing the application's encryption interface. Which action best addresses the migration while maintaining compatibility?

Replace 3DES with AES-256 in the application's encryption module and update all stored ciphertext.

Use RSA to encrypt the data at rest instead of 3DES.

Keep 3DES but increase the key length to 256 bits to improve security.

Wrap the 3DES key with an AES key and store the wrapped key alongside the data.

A company's public-facing website uses a certificate from a public CA. The CA's root certificate is compromised. What is the immediate security concern for the website?

Attackers could issue fraudulent certificates for the website's domain.

The website's encryption keys are automatically compromised.

The website's DNS records will be altered.

The website's certificate will immediately expire.

A database administrator stores user passwords as unsalted SHA-256 hashes. After a breach, an attacker quickly recovers many plaintext passwords. Which improvement would most directly mitigate this type of attack?

Encrypt the password hashes with AES-256 using a static key.

Use a single global salt for all passwords.

Use a unique random salt for each password and a slow key derivation function like bcrypt.

Switch to SHA-512 without salt for stronger hashing.

EC-CouncilCertified Cybersecurity Technician

Domain 5Objective 1

Cryptography CCT Practice Questions (Page 8)

Part of the Cryptography and Data Security domain, which makes up ~9% of our current practice bank.

45questions here

9free pages

8concepts

Questions 36–40

36expert · hard
A company operates a private CA. An employee's private key is suspected of being compromised. The certificate is still valid for another year. What is the most appropriate immediate action?
Select an answer first
37application · medium
A small company uses a legacy application that only supports 3DES for encrypting data at rest. The security team wants to migrate to a modern symmetric algorithm without changing the application's encryption interface. Which action best addresses the migration while maintaining compatibility?
Select an answer first
38application · medium
A company's public-facing website uses a certificate from a public CA. The CA's root certificate is compromised. What is the immediate security concern for the website?
Select an answer first
39application · medium
A database administrator stores user passwords as unsalted SHA-256 hashes. After a breach, an attacker quickly recovers many plaintext passwords. Which improvement would most directly mitigate this type of attack?
Select an answer first
40foundation · easy
Which property of a cryptographic hash function ensures that it is computationally infeasible to find two different inputs that produce the same hash value?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.