A company's internal CA is compromised. The security team must restore trust for all certificates issued by that CA. Which combination of actions is most appropriate?

Reissue all certificates from the same CA with new serial numbers

Disable certificate revocation checking to avoid errors

Extend the validity of existing certificates to avoid reissuing

Revoke all certificates issued by the compromised CA, publish a new CA certificate, and distribute the new CA to all clients

A software vendor distributes a patch via a public download portal. To let customers verify that the patch truly came from the vendor and was not altered in transit, the vendor should sign the patch file with its private key and publish the corresponding public key certificate. What does this process provide to customers?

Non-repudiation of the customer's download activity

Authentication of the vendor and integrity of the patch file

Confidentiality of the patch contents and encryption of the download

A shared secret key for future encrypted updates

An organization is deciding between a single public CA and an internal CA for issuing certificates to internal applications. The applications are only used inside the corporate network, and the organization wants to minimize cost while maintaining control. What is the most appropriate choice?

Use an internal CA and distribute its root certificate to all internal clients

Use self-signed certificates for each application

Use no certificates and rely on IP address allowlists

Use a public CA for every internal application

A company's web server uses TLS with a certificate whose private key was recently exposed in a backup that leaked online. The security team must restore trust in the server's identity. Which action is the most important first step?

Reinstall the same certificate on the server after cleaning the backup

Revoke the compromised certificate and issue a new one with a new key pair

Ask users to clear their browser cache

Change the server's IP address and update DNS

What is the primary purpose of a Public Key Infrastructure (PKI)?

To manage and distribute public keys through digital certificates

EC-CouncilCertified Security Specialist

Domain 1Objective 6

Cryptography and PKI ECSS Practice Questions (Page 4)

Part of the Network Defense Fundamentals and Controls domain, which makes up ~21% of our current practice bank.

50questions here

10free pages

10concepts

Questions 16–20

16expert · hard
A company's internal CA is compromised. The security team must restore trust for all certificates issued by that CA. Which combination of actions is most appropriate?
Select an answer first
17application · medium
A software vendor distributes a patch via a public download portal. To let customers verify that the patch truly came from the vendor and was not altered in transit, the vendor should sign the patch file with its private key and publish the corresponding public key certificate. What does this process provide to customers?
Select an answer first
18expert · hard
An organization is deciding between a single public CA and an internal CA for issuing certificates to internal applications. The applications are only used inside the corporate network, and the organization wants to minimize cost while maintaining control. What is the most appropriate choice?
Select an answer first
19application · medium
A company's web server uses TLS with a certificate whose private key was recently exposed in a backup that leaked online. The security team must restore trust in the server's identity. Which action is the most important first step?
Select an answer first
20foundation · easy
What is the primary purpose of a Public Key Infrastructure (PKI)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.