A security engineer is configuring a site-to-site IPsec VPN between two corporate routers. The requirement is to authenticate the origin of each packet and ensure it has not been modified, but the organization does not require confidentiality because the traffic is already encrypted by the application layer. Which IPsec protocol should the engineer select?

Layer 2 Tunneling Protocol (L2TP) with no encryption

Internet Key Exchange (IKE) without a security association

Encapsulating Security Payload (ESP) in transport mode

A company is deploying BitLocker on new laptops. They want to use the TPM to bind the encryption keys to the hardware, but they also want to ensure that if a laptop is stolen and the TPM is removed, the data remains inaccessible. Which additional measure should they implement?

Store the recovery key in Active Directory

A small non-profit organization has a legacy Windows Server 2003-based file server and 15 Windows XP workstations that need to connect securely to a remote office. The organization cannot afford new hardware or software upgrades. The administrator remembers that PPTP is built into these old Windows versions. What is the most important security consideration before deploying PPTP in this environment?

PPTP only supports IPv6, which the legacy systems do not support

PPTP's MPPE encryption uses RC4, which is cryptographically weak and susceptible to known plaintext attacks

PPTP cannot traverse NAT devices, making remote connectivity impossible

PPTP requires a public certificate authority to issue certificates to all clients

EC-CouncilCertified Encryption Specialist

Domain 4Objective 3

VPN Protocols (PPTP, L2TP, IPSec, SSL/TLS) and Disk Encryption ECES Practice Questions (Page 10)

Part of the Applications of Cryptography domain, which makes up ~25% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 3–5 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

10concepts

Questions 46–50

46application · medium
A security engineer is configuring a site-to-site IPsec VPN between two corporate routers. The requirement is to authenticate the origin of each packet and ensure it has not been modified, but the organization does not require confidentiality because the traffic is already encrypted by the application layer. Which IPsec protocol should the engineer select?
Select an answer first
47application · medium
A company is deploying a site-to-site VPN between two offices. The security team requires that the VPN provide both confidentiality and integrity for all traffic, and they want to use a protocol that operates at the network layer and can be used with either transport or tunnel mode. Which protocol should they choose?
Select an answer first
48application · medium
A company is deploying BitLocker on new laptops. They want to use the TPM to bind the encryption keys to the hardware, but they also want to ensure that if a laptop is stolen and the TPM is removed, the data remains inaccessible. Which additional measure should they implement?
Select an answer first
49application · medium
A small non-profit organization has a legacy Windows Server 2003-based file server and 15 Windows XP workstations that need to connect securely to a remote office. The organization cannot afford new hardware or software upgrades. The administrator remembers that PPTP is built into these old Windows versions. What is the most important security consideration before deploying PPTP in this environment?
Select an answer first
50foundation · easy
Which feature of BitLocker allows a user to access the encrypted drive if they forget their password or lose their smart card?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECES

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECES” is a trademark of its owner, used for identification only.

VPN Protocols (PPTP, L2TP, IPSec, SSL/TLS) and Disk Encryption ECES Practice Questions (Page 10)

Questions 46–50

A company is deploying BitLocker on new laptops. They want to use the TPM to bind the encryption keys to the hardware, but they also want to ensure that if a laptop is stolen and the TPM is removed, the data remains inaccessible. Which additional measure should they implement?

Which feature of BitLocker allows a user to access the encrypted drive if they forget their password or lose their smart card?

Keep studying — Applications of Cryptography