A penetration tester is assessing a legacy VPN deployment that uses PPTP with MS-CHAPv2. The tester captures the authentication traffic and successfully recovers the user's password using a dictionary attack. Which vulnerability in the PPTP authentication process enabled this attack?

MS-CHAPv2 uses a weak NT hash that can be cracked offline with dictionary attacks

PPTP uses a static encryption key that is shared among all users

PPTP transmits the password in plaintext over the tunnel

PPTP's MPPE encryption is reversible without the key

What is the primary role of LUKS (Linux Unified Key Setup) in Linux disk encryption?

It is a kernel module that performs the actual AES encryption of data blocks.

It provides a graphical user interface for encrypting disks on Linux.

It provides a standardized format for storing encryption metadata and managing multiple passphrases for a disk.

It is a command-line tool for generating random encryption keys.

A company is deploying full-disk encryption on both Windows and macOS laptops. They want to ensure that the encryption keys are protected by hardware and that the recovery process is centralized. They also want to minimize the risk of key loss. Which approach should they take?

Use LUKS on both Windows and macOS

Use BitLocker on both Windows and macOS

Use FileVault on both Windows and macOS

Use BitLocker with TPM on Windows and FileVault on macOS, and store recovery keys in Active Directory

EC-CouncilCertified Encryption Specialist

Domain 4Objective 3

VPN Protocols (PPTP, L2TP, IPSec, SSL/TLS) and Disk Encryption ECES Practice Questions (Page 2)

Part of the Applications of Cryptography domain, which makes up ~25% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 3–5 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

10concepts

Questions 6–10

6expert · medium
A penetration tester is assessing a legacy VPN deployment that uses PPTP with MS-CHAPv2. The tester captures the authentication traffic and successfully recovers the user's password using a dictionary attack. Which vulnerability in the PPTP authentication process enabled this attack?
Select an answer first
7foundation · easy
What is the primary role of LUKS (Linux Unified Key Setup) in Linux disk encryption?
Select an answer first
8application · medium
A Linux administrator needs to set up full-disk encryption on a new server. They want to use a standard Linux solution that supports multiple passphrases and easy key management, and they need to ensure the encryption metadata is stored in a standardized format. Which tool should they use?
Select an answer first
9foundation · easy
Which authentication protocol is commonly used with PPTP and is known for its weak security due to the use of the RC4 cipher and a small key space?
Select an answer first
10expert · hard
A company is deploying full-disk encryption on both Windows and macOS laptops. They want to ensure that the encryption keys are protected by hardware and that the recovery process is centralized. They also want to minimize the risk of key loss. Which approach should they take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECES

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECES” is a trademark of its owner, used for identification only.

VPN Protocols (PPTP, L2TP, IPSec, SSL/TLS) and Disk Encryption ECES Practice Questions (Page 2)

Questions 6–10

A penetration tester is assessing a legacy VPN deployment that uses PPTP with MS-CHAPv2. The tester captures the authentication traffic and successfully recovers the user's password using a dictionary attack. Which vulnerability in the PPTP authentication process enabled this attack?

What is the primary role of LUKS (Linux Unified Key Setup) in Linux disk encryption?

A Linux administrator needs to set up full-disk encryption on a new server. They want to use a standard Linux solution that supports multiple passphrases and easy key management, and they need to ensure the encryption metadata is stored in a standardized format. Which tool should they use?

Which authentication protocol is commonly used with PPTP and is known for its weak security due to the use of the RC4 cipher and a small key space?

A company is deploying full-disk encryption on both Windows and macOS laptops. They want to ensure that the encryption keys are protected by hardware and that the recovery process is centralized. They also want to minimize the risk of key loss. Which approach should they take?

Keep studying — Applications of Cryptography