Disk and Email Encryption CEH Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of full-disk encryption (FDE) on a laptop?

   • ATo protect data at rest by encrypting the entire storage device, including the operating system and all user files.
   • BTo encrypt only individual files and folders that the user selects, leaving the rest of the disk unencrypted.
   • CTo prevent malware from running by encrypting the executable files on the disk.
   • DTo protect data in transit by encrypting network traffic between the laptop and a server.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which security service is provided by digitally signing an email?

   • AIntegrity only, because the signature prevents any changes to the email.
   • BAuthentication and non-repudiation, because the signature verifies the sender's identity and proves they sent the message.
   • CAvailability, because the signature ensures the email is delivered.
   • DConfidentiality, because the signature encrypts the message content.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A Linux server administrator needs to encrypt a non-root data partition on a server that is not using LVM. The administrator wants to use a standard Linux tool that supports key management and can be unlocked at boot with a key file stored on a USB drive. Which tool should they use?

   • AFileVault
   • BLUKS with cryptsetup
   • CBitLocker
   • DVeraCrypt
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A user wants to send an encrypted email to a colleague using Gmail with a PGP browser extension. The user has the colleague's public key. What is the correct sequence of steps?

   • AEncrypt the email with the user's private key and send it.
   • BCompose the email, select the colleague's public key, and click the encrypt button.
   • CImport the colleague's private key and use it to encrypt the email.
   • DSend the email unencrypted and then send the password to decrypt it in a separate email.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is a key difference between S/MIME and PGP/GPG for email encryption?

   • AS/MIME is only used for signing, while PGP/GPG is only used for encryption.
   • BS/MIME uses symmetric encryption only, while PGP/GPG uses asymmetric encryption.
   • CS/MIME relies on a centralized public key infrastructure (PKI) with certificates from a certificate authority, while PGP/GPG uses a web of trust model.
   • DS/MIME is open source, while PGP/GPG is proprietary.
   Reveal Solution Discussion Select an answer first