A security architect is designing a key-management strategy for a hybrid encryption system. The system uses a symmetric session key for bulk encryption and asymmetric keys for key exchange. Which practice is most important to ensure the security of the system?

Rotate the asymmetric key pair regularly and use short-lived session keys.

Use a static session key for all communications.

Use the same asymmetric key pair for both encryption and signing.

Store the private key on the same server as the encrypted data.

Which statement correctly describes the relationship between the public and private keys in asymmetric encryption?

The public key is kept secret, and the private key is shared.

The private key is derived from the public key using a simple formula.

They are identical keys used interchangeably.

They are mathematically related, but it is computationally infeasible to derive the private key from the public key.

A developer is implementing a secure messaging app. The app must allow users to exchange messages without ever sharing a secret key in advance. Which cryptographic design should the developer use?

Use Diffie-Hellman to establish a shared secret, then use AES for message encryption.

Use RSA to encrypt each message directly.

Encrypt messages with the sender's private key only.

Use a static symmetric key hardcoded in the app.

A company wants to encrypt files on a shared network drive so that multiple employees can access them. The employees are all in the same department and share a common key. Which encryption approach is most appropriate?

Use a different symmetric key for each file and store the keys in plaintext.

Use a single symmetric key shared by all employees.

Use each employee's public key to encrypt the files individually.

Use RSA to encrypt the entire drive.

Which practice is commonly used to manage symmetric keys securely?

Publishing the key in a public certificate.

Embedding the key in the encrypted message.

Using a key exchange protocol like Diffie-Hellman to establish a shared secret.

Using the same key for all users in an organization.

EC-CouncilCertified Ethical Hacker

Domain 9Objective 1

Encryption Algorithms (Symmetric/Asymmetric) CEH Practice Questions (Page 8)

Part of the Cryptography domain, which makes up ~9% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

8concepts

Questions 36–40

36expert · hard
A security architect is designing a key-management strategy for a hybrid encryption system. The system uses a symmetric session key for bulk encryption and asymmetric keys for key exchange. Which practice is most important to ensure the security of the system?
Select an answer first
37foundation · easy
Which statement correctly describes the relationship between the public and private keys in asymmetric encryption?
Select an answer first
38application · medium
A developer is implementing a secure messaging app. The app must allow users to exchange messages without ever sharing a secret key in advance. Which cryptographic design should the developer use?
Select an answer first
39application · medium
A company wants to encrypt files on a shared network drive so that multiple employees can access them. The employees are all in the same department and share a common key. Which encryption approach is most appropriate?
Select an answer first
40foundation · easy
Which practice is commonly used to manage symmetric keys securely?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.