What is a key implication of using BYOK?

The cloud provider has full access to the keys

The customer retains control over the encryption keys

The customer cannot rotate keys

The keys are stored in plain text

A company runs a web application that sends sensitive data from a browser to an API endpoint. The security team wants to ensure that data is protected while in transit and that the client can verify the identity of the server. Which mechanism should be used?

Asymmetric encryption using the server's public key to encrypt the request body.

TLS with a server certificate issued by a trusted certificate authority (CA).

Symmetric encryption with a pre-shared key embedded in the client application.

IPsec VPN between the client and the API endpoint.

A development team needs to encrypt large volumes of data stored in a cloud object storage bucket. They want a solution that is fast and efficient for bulk encryption, and they plan to use a single key for the encryption operation. Which type of encryption should they use?

Hashing the data with a cryptographic hash function.

Asymmetric encryption with a public/private key pair.

Using a digital signature to protect the data.

Symmetric encryption with a single shared key.

In envelope encryption, what is the role of a data encryption key (DEK)?

It is used to authenticate users

It encrypts the key encryption key (KEK)

It is stored in plain text with the data

Which of the following best describes encryption at rest?

Encrypting data only when it is in use by an application

Encrypting data when it is stored on a persistent medium

Encrypting data during transmission over a network

EC-CouncilCloud Security Essentials

Domain 3Objective 2

Encryption at Rest and in Transit CSE Practice Questions (Page 2)

Part of the Data Protection and Encryption in the Cloud domain, which makes up ~12% of our current practice bank.

55questions here

11free pages

15concepts

15 Concepts in This Objective

Encryption at rest overview
Encryption in transit overview
Symmetric encryption
Asymmetric encryption
Key management fundamentals
Cloud provider key management services
Encryption for data at rest in cloud storage
Encryption for data at rest in databases
TLS/SSL for data in transit
VPN and IPsec for data in transit
Encryption for API and service communication
Envelope encryption
Bring Your Own Key (BYOK)
Server-side vs client-side encryption
Compliance and regulatory considerations

Questions 6–10

6foundation · easy
What is a key implication of using BYOK?
Select an answer first
7application · medium
A company runs a web application that sends sensitive data from a browser to an API endpoint. The security team wants to ensure that data is protected while in transit and that the client can verify the identity of the server. Which mechanism should be used?
Select an answer first
8application · medium
A development team needs to encrypt large volumes of data stored in a cloud object storage bucket. They want a solution that is fast and efficient for bulk encryption, and they plan to use a single key for the encryption operation. Which type of encryption should they use?
Select an answer first
9foundation · easy
In envelope encryption, what is the role of a data encryption key (DEK)?
Select an answer first
10foundation · easy
Which of the following best describes encryption at rest?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.