A security analyst needs to verify that a downloaded firmware image has not been corrupted during the download. The vendor provides a SHA-256 checksum on its website. What should the analyst do to verify the integrity of the firmware?

Compute the SHA-256 hash of the downloaded file and compare it to the vendor's checksum.

Decrypt the file using the vendor's public key and check for a valid signature.

Compare the file size to the size listed on the vendor's website.

Upload the file to an online virus scanner to ensure it is safe.

A user receives a certificate error in the browser when visiting an internal website. The certificate is issued by the company's private CA, but the browser does not trust it. What is the most likely cause?

The browser's clock is set incorrectly.

The website's certificate has expired.

The website's certificate is self-signed.

The private CA's root certificate is not installed in the browser's trusted root store.

EC-CouncilCertified Security Specialist

Domain 1Objective 6

Cryptography and PKI ECSS Practice Questions (Page 3)

Part of the Network Defense Fundamentals and Controls domain, which makes up ~21% of our current practice bank.

50questions here

10free pages

10concepts

Questions 11–15

11foundation · easy
Which component of a Public Key Infrastructure (PKI) is responsible for issuing and revoking digital certificates?
Select an answer first
12application · easy
A security analyst needs to verify that a downloaded firmware image has not been corrupted during the download. The vendor provides a SHA-256 checksum on its website. What should the analyst do to verify the integrity of the firmware?
Select an answer first
13application · medium
A security policy requires that a user cannot deny having submitted a specific transaction. Which cryptographic goal does this requirement address?
Select an answer first
14foundation · easy
Which property of a hash function ensures that it is computationally infeasible to find two different inputs that produce the same hash output?
Select an answer first
15application · medium
A user receives a certificate error in the browser when visiting an internal website. The certificate is issued by the company's private CA, but the browser does not trust it. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Cryptography and PKI ECSS Practice Questions (Page 3)

Questions 11–15

Which component of a Public Key Infrastructure (PKI) is responsible for issuing and revoking digital certificates?

A security analyst needs to verify that a downloaded firmware image has not been corrupted during the download. The vendor provides a SHA-256 checksum on its website. What should the analyst do to verify the integrity of the firmware?

A security policy requires that a user cannot deny having submitted a specific transaction. Which cryptographic goal does this requirement address?

Which property of a hash function ensures that it is computationally infeasible to find two different inputs that produce the same hash output?

A user receives a certificate error in the browser when visiting an internal website. The certificate is issued by the company's private CA, but the browser does not trust it. What is the most likely cause?

Keep studying — Network Defense Fundamentals and Controls