What does a verifier check to ensure that a certificate is part of a valid chain of trust?

That the certificate's serial number is sequential

That each certificate is signed by the private key of the next certificate in the chain

That the certificate's public key matches the private key of the issuer

That the certificate's validity period is longer than the root's

A software development company distributes a mobile app through an official app store. To assure users that the app was not modified after the developer built it, the company signs the app package. What property does the digital signature provide to the end user?

Confidentiality of the app's code

Integrity and authenticity of the app package

A company wants to deploy TLS for its public website. They are considering using a certificate from a public CA versus an internal CA. The website is accessed by external customers. What is the primary consideration?

The public CA certificate is more expensive than an internal CA certificate.

The internal CA can issue certificates faster than a public CA.

The public CA certificate is more secure than an internal CA certificate.

The internal CA certificate must be distributed to all external customers' trust stores.

Which component of an X.509 certificate is used to verify the certificate's digital signature?

The certificate's validity period

The certificate's serial number

EC-CouncilCertified Encryption Specialist

Domain 4Objective 1

Digital Signatures and X.509 Certificates ECES Practice Questions (Page 4)

Part of the Applications of Cryptography domain, which makes up ~25% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 3–5 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

8concepts

Questions 16–20

16application · easy
A security analyst is examining an X.509 certificate presented by a web server during a TLS handshake. The analyst needs to identify which entity is responsible for vouching for the server's identity. Which field in the certificate should the analyst examine?
Select an answer first
17foundation · easy
What does a verifier check to ensure that a certificate is part of a valid chain of trust?
Select an answer first
18application · medium
A software development company distributes a mobile app through an official app store. To assure users that the app was not modified after the developer built it, the company signs the app package. What property does the digital signature provide to the end user?
Select an answer first
19expert · medium
A company wants to deploy TLS for its public website. They are considering using a certificate from a public CA versus an internal CA. The website is accessed by external customers. What is the primary consideration?
Select an answer first
20foundation · easy
Which component of an X.509 certificate is used to verify the certificate's digital signature?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECES

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECES” is a trademark of its owner, used for identification only.