Why is a hash function used in the creation of a digital signature?

To reduce the size of the data that is signed, improving efficiency

To generate the signer's private key

To encrypt the message with a symmetric key

To compress the message for storage

A startup wants to issue certificates for internal applications without incurring the cost of a public CA. They plan to deploy a private CA. What is a critical limitation the startup must address?

Private CA certificates cannot be used for encryption.

Private CA certificates cannot be revoked.

Private CA certificates expire after 30 days.

Private CA certificates are not trusted by default by external clients.

Why is certificate revocation important for maintaining trust in a PKI?

It encrypts the certificate's private key

It speeds up the certificate issuance process

It ensures that compromised or invalid certificates are no longer trusted

It allows certificates to be reused after expiration

A software vendor wants to ensure that users can verify that a downloaded executable has not been modified and was indeed released by the vendor. Which mechanism should the vendor use?

Compress the executable and attach a timestamp.

Digitally sign the executable with the vendor's private key and provide the public key certificate.

Publish a hash of the executable on the vendor's website.

Encrypt the executable with a symmetric key and share the key with users.

What does non-repudiation prevent a signer from doing?

Changing their private key after signing

Denying that they signed a message or document

Encrypting the message with a weak algorithm

Sharing their public key with others

EC-CouncilCertified Ethical Hacker

Domain 9Objective 2

Public Key Infrastructure and Digital Signatures CEH Practice Questions (Page 3)

Part of the Cryptography domain, which makes up ~9% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

12concepts

Questions 11–15

11foundation · easy
Why is a hash function used in the creation of a digital signature?
Select an answer first
12application · medium
A startup wants to issue certificates for internal applications without incurring the cost of a public CA. They plan to deploy a private CA. What is a critical limitation the startup must address?
Select an answer first
13foundation · easy
Why is certificate revocation important for maintaining trust in a PKI?
Select an answer first
14application · medium
A software vendor wants to ensure that users can verify that a downloaded executable has not been modified and was indeed released by the vendor. Which mechanism should the vendor use?
Select an answer first
15foundation · easy
What does non-repudiation prevent a signer from doing?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.