A company wants to set up secure communication between two servers. They need to exchange a symmetric session key over an untrusted network. Which approach is most secure for establishing the shared key?

Send the session key in an email to the administrator

Use the same symmetric key for all servers

Use asymmetric encryption: each server encrypts the session key with the other's public key

Use a hash of the session key as the key itself

A company is implementing a PKI and wants to ensure that certificate status checks are fast and do not require clients to download a large list. Which mechanism should they use?

Certificate Revocation List (CRL)

Online Certificate Status Protocol (OCSP)

A company's internal applications use certificates issued by an internal root CA. A new employee's browser does not trust these certificates. What is the most appropriate way to establish trust?

Ask the applications to use self-signed certificates

Import each application's certificate as a personal certificate

Install the internal root CA certificate into the browser's trusted root store

Disable certificate validation in the browser

In a hierarchical trust model, what is the role of the root certificate authority (CA)?

It issues certificates to end users only

It verifies the identity of all end users

It stores all certificates in the repository

It is the top-level CA that anchors trust for all certificates below it

A small company wants to enable encrypted email between its employees without managing a shared secret for every pair of users. Which approach best meets this requirement?

Encrypt all emails with the company's web server certificate

Use a public key infrastructure where each user has a public/private key pair and senders encrypt with the recipient's public key

Exchange passwords over the phone and use them as encryption keys

Use a single symmetric key shared by all employees

EC-CouncilCertified Security Specialist

Domain 1Objective 6

Cryptography and PKI ECSS Practice Questions (Page 10)

Part of the Network Defense Fundamentals and Controls domain, which makes up ~21% of our current practice bank.

50questions here

10free pages

10concepts

Questions 46–50

46expert · hard
A company wants to set up secure communication between two servers. They need to exchange a symmetric session key over an untrusted network. Which approach is most secure for establishing the shared key?
Select an answer first
47expert · hard
A company is implementing a PKI and wants to ensure that certificate status checks are fast and do not require clients to download a large list. Which mechanism should they use?
Select an answer first
48application · medium
A company's internal applications use certificates issued by an internal root CA. A new employee's browser does not trust these certificates. What is the most appropriate way to establish trust?
Select an answer first
49foundation · easy
In a hierarchical trust model, what is the role of the root certificate authority (CA)?
Select an answer first
50application · medium
A small company wants to enable encrypted email between its employees without managing a shared secret for every pair of users. Which approach best meets this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.