Disk and Email Encryption CEH Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the purpose of key rotation in encryption key management?

   • ATo share the key with more users to improve collaboration.
   • BTo delete all old keys to free up storage space.
   • CTo replace an existing key with a new one periodically to limit the amount of data encrypted with a single key.
   • DTo change the encryption algorithm used for the data.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company wants to deploy S/MIME for email encryption and digital signatures across its enterprise. They need to ensure that all employees can encrypt emails to each other and to external partners, and that the IT department can centrally manage certificates. Which of the following is the most appropriate approach?

   • ADeploy an internal CA and issue S/MIME certificates to all employees, and exchange certificates with partner organizations.
   • BRely on the public CA to issue certificates to each employee individually.
   • CUse self-signed certificates for each employee and distribute them via email.
   • DUse PGP with a central key server and trust-on-first-use for all external partners.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company is deploying full-disk encryption on laptops. They have a requirement that data must be recoverable by IT if an employee leaves, but they also want to minimize the risk of a single point of failure. Which approach best meets these requirements?

   • AStore recovery keys only with the employee.
   • BUse a single recovery key for all laptops.
   • CDo not escrow keys and rely on the employee's password.
   • DEscrow recovery keys to a central management system with multiple administrators.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An employee uses Outlook with S/MIME to send encrypted emails. They receive an email from a new client, but Outlook displays a warning that the sender's certificate is not trusted. What should the employee do to read the email?

   • AAsk the sender to send the email without encryption.
   • BAdd the sender's certificate to the trusted root certificate store after verifying its authenticity.
   • CUse the sender's public key from the email to decrypt the message.
   • DIgnore the warning and open the email anyway.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In Microsoft Outlook, what is required to send an encrypted email to a recipient using S/MIME?

   • AThe recipient's digital certificate (public key) must be installed in the sender's certificate store.
   • BThe recipient must be using the same email server as the sender.
   • CThe sender must have the recipient's private key to encrypt the message.
   • DThe sender must be connected to the recipient's VPN.
   Reveal Solution Discussion Select an answer first