Disk and Email Encryption CEH Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What security service does email encryption primarily provide?

   • ANon-repudiation by proving the sender sent the email, which is provided by digital signatures, not encryption alone.
   • BConfidentiality by ensuring that only the intended recipient can read the email content.
   • CAvailability by ensuring the email server is always accessible.
   • DIntegrity by ensuring the email content is not altered, which is provided by hashing or signatures, not encryption alone.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which disk encryption technology is commonly used on Linux systems and provides a standard on-disk format for encrypted volumes?

   • AVeraCrypt
   • BBitLocker
   • CLUKS
   • DFileVault
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is a common limitation of full-disk encryption (FDE) in an enterprise environment?

   • AIt can impact system performance due to the overhead of encrypting and decrypting data.
   • BIt prevents users from accessing their own files.
   • CIt eliminates the need for backup.
   • DIt only works on solid-state drives (SSDs).
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A user receives an email that appears to be from their bank, but they are concerned it might be a phishing attempt. The email is digitally signed with a valid S/MIME certificate. What can the user conclude from the digital signature?

   • AThe email is safe to open because it is signed.
   • BThe email is encrypted and cannot be read by anyone else.
   • CThe email is from a trusted source because it is signed.
   • DThe email was definitely sent by the bank and has not been altered.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A multinational company is deploying full-disk encryption on all employee laptops. They have a mix of Windows and macOS devices. The security team wants to ensure that encryption is enforced and that recovery keys are escrowed centrally. However, the company also has a requirement that employees must be able to boot their laptops without IT intervention for routine restarts. Which approach best balances these requirements?

   • AUse BitLocker with TPM+PIN on Windows and FileVault with personal recovery key on macOS.
   • BUse self-encrypting drives with a BIOS password on both platforms.
   • CUse VeraCrypt on both platforms with a pre-boot password.
   • DUse BitLocker on Windows with TPM-only and FileVault on macOS with institutional recovery key, and escrow keys to a central management platform.
   Reveal Solution Discussion Select an answer first