A company needs to provide remote access to a legacy internal application that uses a proprietary protocol. The application is not web-based, and the company wants to avoid installing a VPN client on each user's device. Which VPN technology would be most suitable?

IPsec VPN with a software client

SSL/TLS VPN with port forwarding

A multinational corporation needs to connect two branch offices using a VPN over the public internet. The security policy mandates that the VPN provide data confidentiality, integrity, and authentication. The network team is considering L2TP. What additional component is required to meet the security policy?

SSL/TLS termination on the branch routers

A GRE tunnel to encapsulate the L2TP packets

A Linux administrator needs to encrypt a server's root filesystem using LUKS. The server must boot automatically after a power failure, but the administrator wants to ensure that the disk is not accessible if the server is physically stolen. Which approach best balances these requirements?

Use LUKS with a passphrase and require manual entry at every boot

Use a plain dm-crypt volume with a keyfile stored on the root partition

Use LUKS with a keyfile on a USB drive that must be inserted at boot

Use a TPM-based key release with LUKS and a strong passphrase as a fallback

What is the primary function of a Trusted Platform Module (TPM) in the context of disk encryption?

To accelerate the encryption and decryption of data on the hard drive.

To provide a backup of the user's encryption password in case they forget it.

To encrypt the entire hard drive using a hardware-based algorithm.

To securely store encryption keys and perform integrity measurements of the boot process.

How does FileVault integrate with macOS to provide a seamless user experience?

It encrypts the disk in the background and requires the user's login password to unlock the disk at boot.

It requires a separate password for each file that is encrypted.

It only encrypts the user's home folder, not the entire disk.

It uses a hardware token that must be inserted each time the computer boots.

EC-CouncilCertified Encryption Specialist

Domain 4Objective 3

VPN Protocols (PPTP, L2TP, IPSec, SSL/TLS) and Disk Encryption ECES Practice Questions (Page 1)

Part of the Applications of Cryptography domain, which makes up ~25% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 3–5 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

10concepts

Questions 1–5

1application · medium
A company needs to provide remote access to a legacy internal application that uses a proprietary protocol. The application is not web-based, and the company wants to avoid installing a VPN client on each user's device. Which VPN technology would be most suitable?
Select an answer first
2application · medium
A multinational corporation needs to connect two branch offices using a VPN over the public internet. The security policy mandates that the VPN provide data confidentiality, integrity, and authentication. The network team is considering L2TP. What additional component is required to meet the security policy?
Select an answer first
3expert · hard
A Linux administrator needs to encrypt a server's root filesystem using LUKS. The server must boot automatically after a power failure, but the administrator wants to ensure that the disk is not accessible if the server is physically stolen. Which approach best balances these requirements?
Select an answer first
4foundation · easy
What is the primary function of a Trusted Platform Module (TPM) in the context of disk encryption?
Select an answer first
5foundation · easy
How does FileVault integrate with macOS to provide a seamless user experience?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECES

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECES” is a trademark of its owner, used for identification only.