Which mechanism provides both data integrity and non-repudiation by using a sender's private key?

Message authentication code (MAC)

What is the primary trade-off when implementing strong security controls?

Stronger security always improves system performance

Increased security often reduces user convenience and system performance

The trade-off only applies to cloud environments

Security controls have no impact on user experience

A security team is investigating a suspected insider threat. They have audit logs showing that a user accessed a confidential document, but the user claims they did not. The logs are stored on the same server as the document. What is the best way to strengthen the evidence?

Store audit logs in a separate, write-once, tamper-evident location

Ask the user to provide an alibi

Use the document's last accessed timestamp as evidence

Rely on the user's login history to prove they were logged in

A company wants to increase security by requiring employees to change passwords every 30 days and use a 20-character password. However, employees are complaining about lockouts and lost productivity. What is the best approach to balance security and usability?

Require the 20-character password but allow users to write it down

Keep the 30-day change requirement but reduce the password length to 8 characters

Adopt a longer password policy but with a longer change interval, and provide a password manager

Eliminate passwords and use only a fingerprint scanner

EC-CouncilCertified Ethical Hacker

Domain 1Objective 1

Elements of Information Security CEH Practice Questions (Page 6)

Part of the Information Security and Ethical Hacking Overview domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 2–3 from this objective — we provide 57 practice questions to prepare you well beyond it. (estimate)

57questions here

12free pages

10concepts

Questions 26–30

26foundation · easy
Which security goal ensures that a party cannot deny having performed a specific action, such as sending a message?
Select an answer first
27foundation · easy
Which mechanism provides both data integrity and non-repudiation by using a sender's private key?
Select an answer first
28foundation · easy
What is the primary trade-off when implementing strong security controls?
Select an answer first
29expert · hard
A security team is investigating a suspected insider threat. They have audit logs showing that a user accessed a confidential document, but the user claims they did not. The logs are stored on the same server as the document. What is the best way to strengthen the evidence?
Select an answer first
30application · medium
A company wants to increase security by requiring employees to change passwords every 30 days and use a 20-character password. However, employees are complaining about lockouts and lost productivity. What is the best approach to balance security and usability?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.