A government agency maintains a database of citizen records. They need to ensure that any modification to a record can be traced to a specific employee, and that the record cannot be altered without detection. They also want to minimize the performance impact on database operations. Which control is most effective?

Restrict database access to a single administrator account

Encrypt the entire database with transparent data encryption (TDE)

Enable database auditing and use row-level hashing with a separate hash table

Use a blockchain-based ledger for all records

What is the key difference between authentication and authorization?

Authentication ensures data integrity; authorization ensures confidentiality

Authentication controls access; authorization verifies identity

Authentication is used for users; authorization is used for systems

Authentication verifies identity; authorization verifies what an entity can do

A company is implementing a new access control system. They want to use biometric authentication for employees, but some employees have raised privacy concerns about storing biometric data. The company also needs to ensure that employees can be quickly authenticated without long delays. Which approach best addresses these concerns?

Use a fingerprint scanner that stores a mathematical template locally on the device, not the raw image

Require a smart card and a PIN for every authentication

Store raw fingerprint images in a central database for all employees

Use a voice recognition system that requires a passphrase

EC-CouncilCertified Ethical Hacker

Domain 1Objective 1

Elements of Information Security CEH Practice Questions (Page 7)

Part of the Information Security and Ethical Hacking Overview domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 2–3 from this objective — we provide 57 practice questions to prepare you well beyond it. (estimate)

57questions here

12free pages

10concepts

Questions 31–35

31foundation · easy
In the context of the CIA triad, which goal ensures that data remains unaltered and trustworthy?
Select an answer first
32expert · hard
A government agency maintains a database of citizen records. They need to ensure that any modification to a record can be traced to a specific employee, and that the record cannot be altered without detection. They also want to minimize the performance impact on database operations. Which control is most effective?
Select an answer first
33foundation · easy
Which mechanism is commonly used to provide non-repudiation for a digital transaction?
Select an answer first
34foundation · easy
What is the key difference between authentication and authorization?
Select an answer first
35expert · hard
A company is implementing a new access control system. They want to use biometric authentication for employees, but some employees have raised privacy concerns about storing biometric data. The company also needs to ensure that employees can be quickly authenticated without long delays. Which approach best addresses these concerns?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Elements of Information Security CEH Practice Questions (Page 7)

Questions 31–35

In the context of the CIA triad, which goal ensures that data remains unaltered and trustworthy?

Which mechanism is commonly used to provide non-repudiation for a digital transaction?

What is the key difference between authentication and authorization?

Keep studying — Information Security and Ethical Hacking Overview