What is a key recovery challenge when deploying email encryption in an enterprise?

Email encryption increases the size of emails, causing storage issues.

If a user's private key is lost, encrypted emails cannot be decrypted, potentially causing data loss.

Email encryption is incompatible with all mobile devices.

Email encryption requires users to change their email addresses.

A company uses BitLocker for full-disk encryption on its Windows 10 laptops. The IT department needs to ensure that recovery keys are available if a user forgets their PIN or the TPM fails. What is the best way to manage recovery keys?

Automatically back up the recovery key to Active Directory Domain Services (AD DS).

Store the recovery key in a shared network folder.

Have users store the recovery key in their email drafts.

Print the recovery key and attach it to the laptop.

A company is deploying full-disk encryption on employee laptops. The IT support team is concerned about users forgetting their passwords and being locked out. Which of the following is the best practice to mitigate this risk?

Disable full-disk encryption on laptops to avoid lockouts.

Implement a recovery key escrow process so that IT can unlock the drive when needed.

Store recovery keys on a public file share for easy access.

Use the same password for all users to simplify recovery.

A company is deploying full-disk encryption on laptops. They are concerned about the performance impact on older machines. Which approach minimizes performance impact while still providing encryption?

Use VeraCrypt with AES-NI disabled.

Use a self-encrypting drive (SED) with hardware encryption.

Use BitLocker with software encryption.

An organization uses S/MIME for email encryption. An employee's private key is suspected to be compromised. The IT team needs to revoke the certificate and ensure that encrypted emails sent to that employee cannot be read by the attacker. What should they do?

Only revoke the certificate and do not issue a new one.

Delete the employee's public key from the directory.

Issue a new certificate but do not revoke the old one.

Revoke the certificate and issue a new one, then re-encrypt any stored emails with the new key.

EC-CouncilCertified Ethical Hacker

Domain 9Objective 4

Disk and Email Encryption CEH Practice Questions (Page 4)

Part of the Cryptography domain, which makes up ~9% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

Questions 16–20

16foundation · easy
What is a key recovery challenge when deploying email encryption in an enterprise?
Select an answer first
17application · medium
A company uses BitLocker for full-disk encryption on its Windows 10 laptops. The IT department needs to ensure that recovery keys are available if a user forgets their PIN or the TPM fails. What is the best way to manage recovery keys?
Select an answer first
18application · medium
A company is deploying full-disk encryption on employee laptops. The IT support team is concerned about users forgetting their passwords and being locked out. Which of the following is the best practice to mitigate this risk?
Select an answer first
19application · medium
A company is deploying full-disk encryption on laptops. They are concerned about the performance impact on older machines. Which approach minimizes performance impact while still providing encryption?
Select an answer first
20expert · hard
An organization uses S/MIME for email encryption. An employee's private key is suspected to be compromised. The IT team needs to revoke the certificate and ensure that encrypted emails sent to that employee cannot be read by the attacker. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.