Disk and Email Encryption CEH Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   In PGP/GPG email encryption, how is the session key used to encrypt the email content?

   • AThe recipient's private key is used to encrypt the message, and the sender's public key decrypts it.
   • BA static session key is shared between sender and recipient and used for all messages.
   • CThe sender's private key is used to encrypt the message, and the recipient's public key decrypts it.
   • DA random session key is generated, used to symmetrically encrypt the message, and then encrypted with the recipient's public key.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is a key characteristic of a self-encrypting drive (SED)?

   • AIt encrypts data using a hardware-based encryption engine built into the drive, with the encryption key managed by the drive itself.
   • BIt uses a single static key that never changes, making it easy to recover data.
   • CIt requires third-party software to encrypt data, and the encryption key is stored in the operating system.
   • DIt only encrypts the user data partition, leaving the system partition unencrypted.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company is implementing email encryption for its executives. They need to ensure that emails are confidential and that the sender cannot deny having sent them. They also want to minimize the administrative overhead of managing keys. Which approach is most appropriate?

   • AUse a shared symmetric key for all executives.
   • BUse PGP with a web of trust model.
   • CUse S/MIME with certificates issued by the company's internal PKI.
   • DUse TLS for SMTP to encrypt emails in transit.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   An organization wants to ensure that emails sent between employees are protected from eavesdropping and that recipients can verify the sender's identity. They are using Microsoft Outlook and have an internal CA. Which configuration should they implement?

   • AUse PGP with a web of trust.
   • BUse password-protected ZIP files attached to emails.
   • CUse TLS for SMTP only.
   • DEnable S/MIME in Outlook and issue certificates to all employees.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   An employee's laptop was lost, and the BitLocker recovery key was used to unlock the drive. The IT department wants to ensure that the recovery key is no longer valid for future use and that the employee's access is revoked. What should they do?

   • ARotate the BitLocker recovery password and disable the user's account.
   • BReissue the same recovery password to the employee and keep the account active.
   • CFormat the hard drive and reinstall Windows.
   • DDelete the recovery password from Active Directory and do nothing else.
   Reveal Solution Discussion Select an answer first