A company is implementing a secure messaging system. They want to use Diffie-Hellman to establish a shared secret, but they are concerned about man-in-the-middle attacks. Which additional mechanism should they implement to mitigate this risk?

Authenticate the public keys using digital signatures.

Encrypt the Diffie-Hellman messages with a pre-shared key.

Use a stronger random number generator.

A security auditor is evaluating a system that generates Diffie-Hellman keys. The system uses a PRNG seeded with a 32-bit value derived from the system clock. Which vulnerability does this introduce?

The PRNG will produce the same sequence every time.

The seed space is too small, making keys predictable.

The PRNG will produce biased output.

A developer is implementing a PRNG for a non-cryptographic simulation and a separate CSPRNG for key generation. Which comparison is accurate?

A CSPRNG does not require a seed.

A PRNG is more secure than a CSPRNG.

A CSPRNG must be unpredictable to an adversary, while a PRNG only needs statistical randomness.

A PRNG is always faster than a CSPRNG.

An organization is setting up a new server that will generate Diffie-Hellman key pairs for TLS connections. The server has a CPU that provides the RDRAND instruction, which uses an on-die hardware entropy source. The system administrator wants to ensure that the random numbers used for key generation are cryptographically secure. Which approach best utilizes the available hardware entropy while maintaining security?

Use a software-based PRNG like Mersenne Twister seeded with the current system time.

Use the RDRAND output to directly generate the private exponent without any additional processing.

Use RDRAND to seed a cryptographically secure PRNG (CSPRNG) and then use the CSPRNG output for key generation.

Use RDRAND directly as the sole source of random numbers for key generation.

EC-CouncilCertified Encryption Specialist

Domain 3Objective 3

Diffie-Hellman Key Exchange and Random Number Generators ECES Practice Questions (Page 8)

Part of the Asymmetric Cryptography and Number Theory domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

7concepts

Questions 36–40

36application · medium
A company is implementing a secure messaging system. They want to use Diffie-Hellman to establish a shared secret, but they are concerned about man-in-the-middle attacks. Which additional mechanism should they implement to mitigate this risk?
Select an answer first
37application · medium
A security auditor is evaluating a system that generates Diffie-Hellman keys. The system uses a PRNG seeded with a 32-bit value derived from the system clock. Which vulnerability does this introduce?
Select an answer first
38application · medium
A developer is implementing a PRNG for a non-cryptographic simulation and a separate CSPRNG for key generation. Which comparison is accurate?
Select an answer first
39application · medium
An organization is setting up a new server that will generate Diffie-Hellman key pairs for TLS connections. The server has a CPU that provides the RDRAND instruction, which uses an on-die hardware entropy source. The system administrator wants to ensure that the random numbers used for key generation are cryptographically secure. Which approach best utilizes the available hardware entropy while maintaining security?
Select an answer first
40foundation · easy
In Diffie-Hellman, if p = 23 and g = 5 (a primitive root modulo 23), and Alice's private key is a = 6, what is Alice's public value A?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ECES

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECES” is a trademark of its owner, used for identification only.

Diffie-Hellman Key Exchange and Random Number Generators ECES Practice Questions (Page 8)

Questions 36–40

A company is implementing a secure messaging system. They want to use Diffie-Hellman to establish a shared secret, but they are concerned about man-in-the-middle attacks. Which additional mechanism should they implement to mitigate this risk?

A security auditor is evaluating a system that generates Diffie-Hellman keys. The system uses a PRNG seeded with a 32-bit value derived from the system clock. Which vulnerability does this introduce?

A developer is implementing a PRNG for a non-cryptographic simulation and a separate CSPRNG for key generation. Which comparison is accurate?

In Diffie-Hellman, if p = 23 and g = 5 (a primitive root modulo 23), and Alice's private key is a = 6, what is Alice's public value A?

Keep studying — Asymmetric Cryptography and Number Theory