What is the main difference between symmetric and asymmetric encryption?

Symmetric encryption is stronger than asymmetric encryption

Symmetric encryption uses one key for both encryption and decryption, while asymmetric uses a pair of keys

Symmetric encryption is used only for data at rest, while asymmetric is used only for data in transit

Symmetric encryption requires a public key, while asymmetric uses a private key

A healthcare organization stores patient records in an on-premises database and also transmits them to a cloud-based analytics platform. The compliance team requires that the data remain unreadable if the database files are stolen, and that the data be protected during transmission. The organization currently uses TLS for the transmission. Which additional control should be implemented to meet the requirement?

Apply a data masking policy to the database

Enable transparent data encryption (TDE) on the database

Use a VPN for all database connections

Implement a data loss prevention (DLP) agent on the database server

A user is working on a confidential document on their laptop. The document is open in a word processor, and the laptop is connected to the corporate Wi-Fi. The user saves the document to an encrypted hard drive. Which data states are involved in this scenario?

Data in use, data in transit, and data at rest

A software testing team needs realistic customer data to test a new billing system, but the production database contains personally identifiable information (PII) that must not be exposed to developers. The team also needs to verify that the billing logic works correctly with various date formats. Which technique should be used?

Delete all rows that contain PII before giving the database to the testing team.

Replace PII fields with realistic fake values while preserving the original data format and relationships.

Use a backup of the production database and restore it to a test server with no additional changes.

Encrypt the entire database and give developers the decryption key.

A company needs to share a dataset with a third-party vendor for development. The dataset contains personal data. The company wants to minimize the risk of re-identification while maintaining the data's utility for testing. Which technique should be used?

Apply data masking with consistent substitution to preserve referential integrity

Use a DLP solution to monitor the vendor's access

Remove all personal data fields from the dataset

Encrypt the dataset and provide the decryption key to the vendor

EC-CouncilCertified Cybersecurity Technician

Domain 5Objective 2

Data Security CCT Practice Questions (Page 7)

Part of the Cryptography and Data Security domain, which makes up ~9% of our current practice bank.

49questions here

10free pages

10concepts

Questions 31–35

31foundation · easy
What is the main difference between symmetric and asymmetric encryption?
Select an answer first
32application · medium
A healthcare organization stores patient records in an on-premises database and also transmits them to a cloud-based analytics platform. The compliance team requires that the data remain unreadable if the database files are stolen, and that the data be protected during transmission. The organization currently uses TLS for the transmission. Which additional control should be implemented to meet the requirement?
Select an answer first
33application · medium
A user is working on a confidential document on their laptop. The document is open in a word processor, and the laptop is connected to the corporate Wi-Fi. The user saves the document to an encrypted hard drive. Which data states are involved in this scenario?
Select an answer first
34application · medium
A software testing team needs realistic customer data to test a new billing system, but the production database contains personally identifiable information (PII) that must not be exposed to developers. The team also needs to verify that the billing logic works correctly with various date formats. Which technique should be used?
Select an answer first
35expert · hard
A company needs to share a dataset with a third-party vendor for development. The dataset contains personal data. The company wants to minimize the risk of re-identification while maintaining the data's utility for testing. Which technique should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Data Security CCT Practice Questions (Page 7)

Questions 31–35

What is the main difference between symmetric and asymmetric encryption?

A user is working on a confidential document on their laptop. The document is open in a word processor, and the laptop is connected to the corporate Wi-Fi. The user saves the document to an encrypted hard drive. Which data states are involved in this scenario?

A company needs to share a dataset with a third-party vendor for development. The dataset contains personal data. The company wants to minimize the risk of re-identification while maintaining the data's utility for testing. Which technique should be used?

Keep studying — Cryptography and Data Security