Disk and Email Encryption CEH Practice Questions (Page 8)

Questions 36–40

1. 36application · easy

   An employee needs to send a digitally signed email to an external client using S/MIME in Outlook. The employee has a valid S/MIME certificate. What must the employee do to sign the email?

   • AClick the 'Sign' button in Outlook before sending.
   • BUse the client's certificate to sign the email.
   • CAttach the certificate to the email and send it unencrypted.
   • DEncrypt the email with the client's public key.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which disk encryption tool is natively integrated into Windows operating systems and uses the Trusted Platform Module (TPM) for key protection?

   • ALUKS
   • BFileVault
   • CVeraCrypt
   • DBitLocker
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A healthcare organization needs to send patient referral documents via email to external specialists. The compliance team requires that the email content and attachments be protected from unauthorized reading, that the recipient can verify the email truly came from the organization's provider, and that the provider cannot deny having sent it. Which email security mechanism should be used?

   • AUse a transport-level encryption like TLS for the SMTP connection only.
   • BEncrypt the email with the sender's private key and sign it with the recipient's public key.
   • CSend the email with a password-protected PDF attachment and a separate email with the password.
   • DDigitally sign the email with the sender's private key and encrypt it with the recipient's public key.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Why is it important to securely store encryption keys?

   • ATo make it easier to recover data if the key is lost.
   • BTo prevent the key from being used by multiple users.
   • CIf an encryption key is compromised, an attacker can decrypt all data encrypted with that key.
   • DTo ensure the key is available to all authorized users.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company is considering using self-encrypting drives (SEDs) for its new laptops. The security team wants to ensure that if a laptop is lost, the data on the drive cannot be accessed by removing the drive and connecting it to another computer. What is the primary security feature of SEDs that addresses this concern?

   • AThe drive requires a password to be entered every time the computer is turned on.
   • BThe drive uses a unique encryption key for each file, making it impossible to decrypt without the file's key.
   • CThe drive's encryption key is stored in the drive's hardware and is unlocked only with the correct authentication.
   • DThe drive automatically wipes itself if it detects unauthorized access.
   Reveal Solution Discussion Select an answer first