A security auditor is reviewing a certificate issued by an internal CA. The certificate has a validity period of 10 years, but the CA's root certificate expires in 2 years. What is the primary risk associated with this certificate?

The certificate will be revoked by the CA when the root expires.

The certificate will become untrusted when the root CA expires, because the trust chain will be broken.

The certificate's private key will be automatically rotated when the root expires.

The certificate's serial number will be reused when the root expires.

A bank requires that customers cannot deny having authorized a wire transfer. The bank's system uses digital signatures for transaction authorization. Which property of digital signatures directly provides this assurance?

Confidentiality of the transaction data

Integrity of the bank's database

Availability of the banking system

Non-repudiation of the transaction

A company is planning to deploy a public-facing web application that requires TLS certificates. They are considering using a public CA versus running their own private CA. Which factor is most important when deciding to use a public CA?

The public CA provides faster certificate issuance.

The private CA cannot support certificate revocation.

The public CA offers cheaper certificates.

The private CA would require clients to install its root certificate.

What is the primary purpose of a digital certificate in a Public Key Infrastructure?

To encrypt data using symmetric encryption

To bind a public key to an entity's identity

To provide a backup of the certificate holder's password

To store the private key of the certificate holder

What is the primary role of a Certificate Authority (CA) in a PKI?

To issue and digitally sign digital certificates

EC-CouncilCertified Ethical Hacker

Domain 9Objective 2

Public Key Infrastructure and Digital Signatures CEH Practice Questions (Page 10)

Part of the Cryptography domain, which makes up ~9% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

12concepts

Questions 46–50

46expert · hard
A security auditor is reviewing a certificate issued by an internal CA. The certificate has a validity period of 10 years, but the CA's root certificate expires in 2 years. What is the primary risk associated with this certificate?
Select an answer first
47application · medium
A bank requires that customers cannot deny having authorized a wire transfer. The bank's system uses digital signatures for transaction authorization. Which property of digital signatures directly provides this assurance?
Select an answer first
48expert · hard
A company is planning to deploy a public-facing web application that requires TLS certificates. They are considering using a public CA versus running their own private CA. Which factor is most important when deciding to use a public CA?
Select an answer first
49foundation · easy
What is the primary purpose of a digital certificate in a Public Key Infrastructure?
Select an answer first
50foundation · easy
What is the primary role of a Certificate Authority (CA) in a PKI?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.