How is encryption typically applied to API calls?

By using TLS to encrypt the HTTP request and response

By storing API keys in plain text

By using a checksum in the header

By encrypting the API documentation

Which of the following is an example of protecting data in transit?

Encrypting a database file on disk

Using TLS to encrypt an HTTPS connection

Applying a password to a document

Using a checksum to verify file integrity

A remote employee needs to securely access internal cloud resources over the public internet. The company requires that all traffic between the employee's laptop and the corporate network be encrypted and that the employee be authenticated before access is granted. Which solution should be deployed?

A VPN client that establishes an IPsec tunnel to the corporate gateway, with user authentication via certificates or multi-factor authentication.

A firewall rule that allows the employee's IP address to access internal resources.

A symmetric encryption key shared with the employee and used to encrypt all traffic.

TLS/SSL on the internal web applications only.

What does IPsec provide for network traffic?

Encryption only at the application layer

Encryption and authentication at the IP layer

Authentication only, without encryption

Why is key management important in encryption?

Because keys can be shared publicly without risk

Because the security of encrypted data depends on the secrecy and proper handling of keys

Because keys are automatically generated and never need to be changed

Because keys are only needed for decryption, not encryption

EC-CouncilCloud Security Essentials

Domain 3Objective 2

Encryption at Rest and in Transit CSE Practice Questions (Page 8)

Part of the Data Protection and Encryption in the Cloud domain, which makes up ~12% of our current practice bank.

55questions here

11free pages

15concepts

15 Concepts in This Objective

Encryption at rest overview
Encryption in transit overview
Symmetric encryption
Asymmetric encryption
Key management fundamentals
Cloud provider key management services
Encryption for data at rest in cloud storage
Encryption for data at rest in databases
TLS/SSL for data in transit
VPN and IPsec for data in transit
Encryption for API and service communication
Envelope encryption
Bring Your Own Key (BYOK)
Server-side vs client-side encryption
Compliance and regulatory considerations

Questions 36–40

36foundation · easy
How is encryption typically applied to API calls?
Select an answer first
37foundation · easy
Which of the following is an example of protecting data in transit?
Select an answer first
38application · medium
A remote employee needs to securely access internal cloud resources over the public internet. The company requires that all traffic between the employee's laptop and the corporate network be encrypted and that the employee be authenticated before access is granted. Which solution should be deployed?
Select an answer first
39foundation · easy
What does IPsec provide for network traffic?
Select an answer first
40foundation · easy
Why is key management important in encryption?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.