A developer is designing a digital signature scheme for a resource-constrained IoT device. The device signs sensor readings before transmitting them. The developer wants to minimize the size of the transmitted data while maintaining security. Which approach is most appropriate?

Use a symmetric key to generate a MAC and send it with the data.

Encrypt the sensor data with the public key and send the ciphertext.

Sign the raw sensor data directly with the private key using RSA.

Hash the sensor data and sign only the hash with the private key.

A software vendor distributes a critical security update. To let customers verify that the update is genuine and has not been tampered with, the vendor signs the update. Which certificate-related practice is essential for the vendor to follow?

Include the vendor's private key in the update so customers can verify the signature.

Ensure the certificate has a long validity period and never expires.

Encrypt the update with the vendor's private key so only the vendor can decrypt it.

Use a certificate issued by a CA that is trusted by the target customers' operating systems.

A company's web server certificate was compromised and must be invalidated immediately. The certificate is currently trusted by clients. Which mechanism should the CA use to ensure that clients reject this certificate before its expiration date?

Publish a Certificate Revocation List (CRL) containing the certificate's serial number.

Reissue the certificate with a new serial number and keep the old one active.

Wait for the certificate to expire naturally.

Delete the certificate from the server and rely on clients to notice.

An administrator is examining an X.509 certificate presented by a web server. The administrator wants to determine which entity issued the certificate and whether the certificate is currently valid. Which two fields in the certificate should the administrator inspect?

Public Key and Signature Algorithm

A company operates an internal PKI with a root CA and two subordinate CAs. An application needs to validate a certificate issued by one of the subordinate CAs. Which set of certificates must the application trust to successfully build a chain?

Only the end-entity certificate presented by the server.

Any certificate from the same root CA, regardless of the subordinate CA.

The subordinate CA certificate and the root CA certificate.

The root CA certificate only, because it signs all certificates directly.

EC-CouncilCertified Encryption Specialist

Domain 4Objective 1

Digital Signatures and X.509 Certificates ECES Practice Questions (Page 1)

Part of the Applications of Cryptography domain, which makes up ~25% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 3–5 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

8concepts

Questions 1–5

1expert · medium
A developer is designing a digital signature scheme for a resource-constrained IoT device. The device signs sensor readings before transmitting them. The developer wants to minimize the size of the transmitted data while maintaining security. Which approach is most appropriate?
Select an answer first
2application · medium
A software vendor distributes a critical security update. To let customers verify that the update is genuine and has not been tampered with, the vendor signs the update. Which certificate-related practice is essential for the vendor to follow?
Select an answer first
3application · medium
A company's web server certificate was compromised and must be invalidated immediately. The certificate is currently trusted by clients. Which mechanism should the CA use to ensure that clients reject this certificate before its expiration date?
Select an answer first
4application · easy
An administrator is examining an X.509 certificate presented by a web server. The administrator wants to determine which entity issued the certificate and whether the certificate is currently valid. Which two fields in the certificate should the administrator inspect?
Select an answer first
5application · medium
A company operates an internal PKI with a root CA and two subordinate CAs. An application needs to validate a certificate issued by one of the subordinate CAs. Which set of certificates must the application trust to successfully build a chain?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECES

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECES” is a trademark of its owner, used for identification only.