Encryption Algorithms (Symmetric/Asymmetric) CEH Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A security team is comparing encryption algorithms for a new VPN. The VPN will carry high-throughput traffic and must minimize latency. Which algorithm should they choose for the bulk data encryption?

   • AAES-256-GCM
   • BDiffie-Hellman
   • CRSA-2048
   • D3DES
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is a characteristic of the DES algorithm?

   • AIt uses a 56-bit key and is now considered insecure due to brute-force attacks.
   • BIt is an asymmetric algorithm used for key exchange.
   • CIt is a stream cipher that encrypts bit by bit.
   • DIt uses a 128-bit key and is the current standard.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A small company has been using a single symmetric key to encrypt all internal communications. The key was shared among employees via email. A new security policy requires a more secure key-distribution method. Which change best addresses the risk?

   • AUse a longer symmetric key to improve security.
   • BUse a key-management system (KMS) to generate, store, and rotate keys.
   • CSwitch to asymmetric encryption for all internal communications.
   • DContinue using the same key but change it every year.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security auditor is reviewing a legacy system that still uses DES for encrypting data at rest. The organization wants to improve security without completely replacing the system. Which recommendation is most appropriate?

   • ASwitch to Blowfish with a 64-bit block size.
   • BMigrate to AES-256 for all new data and plan to re-encrypt existing data.
   • CContinue using DES but increase the key size to 256 bits.
   • DUse RSA to encrypt the data at rest.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A multinational company needs to securely distribute a new encryption key to branch offices in different countries. The key will be used for encrypting internal communications. Which method provides the most secure and scalable key distribution?

   • AUse a courier to physically deliver the key to each office.
   • BPost the key on a shared internal wiki page.
   • CEmail the key to each branch office's IT administrator.
   • DEncrypt the symmetric key with each branch's RSA public key and send it electronically.
   Reveal Solution Discussion Select an answer first