A company is deploying full-disk encryption on employee laptops. They are concerned about the performance impact of encryption on older laptops. They also need to ensure that data is protected if a laptop is lost or stolen. Which approach balances performance and security?

Use self-encrypting drives (SEDs) that offload encryption to the drive hardware, reducing CPU overhead.

Use a simple password-protected BIOS to prevent unauthorized access.

Use software-based encryption like BitLocker without a TPM.

Use a cloud-based encryption service that encrypts data in the cloud.

An organization has a mixed environment of Windows 10 and Linux workstations. They need to enforce full-disk encryption on all endpoints, but they want to minimize the number of management tools and support a centralized recovery key escrow. Which combination of technologies should they choose?

Use FileVault on Windows and Linux workstations.

Use VeraCrypt on all systems and store recovery keys in a shared spreadsheet.

Use BitLocker on all systems by installing it on Linux via a compatibility layer.

Use BitLocker on Windows and LUKS on Linux, and manage recovery keys via a central key management server that supports both.

An organization uses PGP for email encryption. An employee's private key is suspected to be compromised. Which of the following is the most important immediate action to take?

Send a new public key to all contacts without revoking the old one.

Revoke the compromised key and generate a new key pair.

Change the passphrase on the existing key.

Delete the public key from the key server.

A company uses S/MIME for email encryption. An employee receives an email that appears to be from a colleague, but the digital signature fails to validate. Which of the following is the most likely cause?

The email was encrypted with a different algorithm than the recipient's email client supports.

The recipient's private key is not installed in their email client.

The sender used a PGP key instead of an S/MIME certificate.

The sender's certificate has expired or has been revoked.

An organization is planning to deploy full-disk encryption on all employee laptops. They have a mix of Windows and macOS devices. They want to ensure that recovery keys are centrally managed and that employees can self-service recover their own keys if they forget their passwords. Which solution best meets these requirements?

Use FileVault on all devices by installing it on Windows via a compatibility layer.

Use VeraCrypt on all devices and store recovery keys in a shared spreadsheet.

Use BitLocker on Windows and FileVault on macOS, and integrate both with a central key management system that supports self-service recovery.

Use BitLocker on all devices by installing it on macOS via a compatibility layer.

EC-CouncilCertified Ethical Hacker

Domain 9Objective 4

Disk and Email Encryption CEH Practice Questions (Page 3)

Part of the Cryptography domain, which makes up ~9% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

Questions 11–15

11expert · hard
A company is deploying full-disk encryption on employee laptops. They are concerned about the performance impact of encryption on older laptops. They also need to ensure that data is protected if a laptop is lost or stolen. Which approach balances performance and security?
Select an answer first
12application · medium
An organization has a mixed environment of Windows 10 and Linux workstations. They need to enforce full-disk encryption on all endpoints, but they want to minimize the number of management tools and support a centralized recovery key escrow. Which combination of technologies should they choose?
Select an answer first
13application · medium
An organization uses PGP for email encryption. An employee's private key is suspected to be compromised. Which of the following is the most important immediate action to take?
Select an answer first
14application · medium
A company uses S/MIME for email encryption. An employee receives an email that appears to be from a colleague, but the digital signature fails to validate. Which of the following is the most likely cause?
Select an answer first
15expert · hard
An organization is planning to deploy full-disk encryption on all employee laptops. They have a mix of Windows and macOS devices. They want to ensure that recovery keys are centrally managed and that employees can self-service recover their own keys if they forget their passwords. Which solution best meets these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.