A developer is implementing encryption for data at rest. They are considering using the same key for both encryption and decryption of all data. What is the main security concern with this approach?

The encryption algorithm will be slower if the same key is used for all data.

The same key cannot be used for both encryption and decryption.

The key will expire after a certain number of uses.

If the key is compromised, all data encrypted with that key is exposed.

EC-CouncilDevSecOps Essentials

Domain 5Objective 2

Integrating Secure Coding in the Code Stage DSE Practice Questions (Page 12)

Part of the Implementing DevSecOps Testing and Threat Modeling domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 2–3 from this objective — we provide 56 practice questions to prepare you well beyond it. (estimate)

56questions here

12free pages

12concepts

12 Concepts in This Objective

Secure Coding Fundamentals
Threat Modeling in Code Stage
Static Application Security Testing (SAST)
Code Review for Security
Secure Coding Standards and Guidelines
Input Validation and Output Encoding
Authentication and Authorization Controls
Error Handling and Logging Security
Cryptography in Code
Dependency and Supply Chain Security
Security Testing Integration in CI/CD
Remediation and Fixing Vulnerabilities

Questions 56–56

56expert · hard
A developer is implementing encryption for data at rest. They are considering using the same key for both encryption and decryption of all data. What is the main security concern with this approach?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.

Integrating Secure Coding in the Code Stage DSE Practice Questions (Page 12)

Questions 56–56

A developer is implementing encryption for data at rest. They are considering using the same key for both encryption and decryption of all data. What is the main security concern with this approach?

Keep studying — Implementing DevSecOps Testing and Threat Modeling