An organization is setting up encrypted communication between two servers in different data centers. They need to establish a shared secret over an untrusted network. Which protocol should they use?

AES encryption with a pre-shared key

RSA encryption of the data directly

A development team is building a mobile app that needs to encrypt small payloads (e.g., JSON tokens) before sending them to a server. The server must be able to decrypt them without any prior key exchange with the client. Which encryption approach should the team use?

Use the client's private key to encrypt the payload.

Use the server's RSA public key to encrypt the payload.

Use a Diffie-Hellman key exchange to establish a session key.

Use a symmetric key hardcoded in the app.

A startup wants to enable secure email communication with external partners. They need to ensure that only the intended recipient can read the message, and they want to avoid the complexity of manually exchanging symmetric keys with each partner. Which solution should they implement?

Use the sender's private key to encrypt the email.

Use S/MIME with the recipient's public certificate to encrypt the email.

Use a plaintext email with a digital signature.

Use a shared symmetric key that is exchanged via a phone call.

A company needs to encrypt large database backups before storing them in a cloud bucket. The backups are typically 50–100 GB. The security team has a secure key-management system (KMS) that can generate and store keys. Which encryption approach is most appropriate for this workload?

Use ECC with a 256-bit key to encrypt the backups.

Use 3DES with a key stored in the KMS.

Use RSA-2048 to encrypt each backup file directly.

Use AES-256 with a key generated and stored in the KMS.

What is the primary key distribution challenge in symmetric encryption?

The key must be stored in a public directory.

The secret key must be securely shared between parties before communication.

The public key must be distributed to all parties.

The key must be regenerated for every message.

EC-CouncilCertified Ethical Hacker

Domain 9Objective 1

Encryption Algorithms (Symmetric/Asymmetric) CEH Practice Questions (Page 5)

Part of the Cryptography domain, which makes up ~9% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

8concepts

Questions 21–25

21application · medium
An organization is setting up encrypted communication between two servers in different data centers. They need to establish a shared secret over an untrusted network. Which protocol should they use?
Select an answer first
22application · medium
A development team is building a mobile app that needs to encrypt small payloads (e.g., JSON tokens) before sending them to a server. The server must be able to decrypt them without any prior key exchange with the client. Which encryption approach should the team use?
Select an answer first
23application · medium
A startup wants to enable secure email communication with external partners. They need to ensure that only the intended recipient can read the message, and they want to avoid the complexity of manually exchanging symmetric keys with each partner. Which solution should they implement?
Select an answer first
24application · medium
A company needs to encrypt large database backups before storing them in a cloud bucket. The backups are typically 50–100 GB. The security team has a secure key-management system (KMS) that can generate and store keys. Which encryption approach is most appropriate for this workload?
Select an answer first
25foundation · easy
What is the primary key distribution challenge in symmetric encryption?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.