A security engineer is designing a system to store user passwords. The system must allow users to authenticate without storing the actual passwords, and it must resist brute-force attacks even if the password database is leaked. Which approach best meets these requirements?

Store passwords encrypted with a symmetric key and keep the key on the same server.

Store passwords in plaintext but restrict database access to administrators only.

Store a fast hash like MD5 of each password without a salt.

Store a salted hash of each password using a slow, key-stretching algorithm such as bcrypt or PBKDF2.

A legal department requires proof that a contract was signed by a specific executive and that the contract has not been altered since signing. Which cryptographic mechanism should be used?

Hash of the contract stored in a database

Symmetric encryption of the contract with a shared key

Digital signature created with the executive's private key

Timestamp from a trusted time server

A database administrator needs to encrypt a large volume of data at rest in a way that minimizes performance overhead while still providing strong confidentiality. Which approach is most appropriate?

Use a digital signature to protect the data

Use a symmetric encryption algorithm such as AES with a securely managed key

Use a hash function to encrypt the data

Use an asymmetric algorithm such as RSA to encrypt each record

EC-CouncilCertified Security Specialist

Domain 1Objective 6

Cryptography and PKI ECSS Practice Questions (Page 5)

Part of the Network Defense Fundamentals and Controls domain, which makes up ~21% of our current practice bank.

50questions here

10free pages

10concepts

Questions 21–25

21foundation · easy
Which of the following is a core goal of cryptography that ensures data has not been altered?
Select an answer first
22expert · hard
A security engineer is designing a system to store user passwords. The system must allow users to authenticate without storing the actual passwords, and it must resist brute-force attacks even if the password database is leaked. Which approach best meets these requirements?
Select an answer first
23expert · hard
A legal department requires proof that a contract was signed by a specific executive and that the contract has not been altered since signing. Which cryptographic mechanism should be used?
Select an answer first
24application · medium
A database administrator needs to encrypt a large volume of data at rest in a way that minimizes performance overhead while still providing strong confidentiality. Which approach is most appropriate?
Select an answer first
25application · medium
An organization is designing a PKI to issue certificates to employees. They want to separate the identity-verification process from the certificate-issuing process to improve security and auditability. Which PKI component should handle identity verification?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Cryptography and PKI ECSS Practice Questions (Page 5)

Questions 21–25

Which of the following is a core goal of cryptography that ensures data has not been altered?

A security engineer is designing a system to store user passwords. The system must allow users to authenticate without storing the actual passwords, and it must resist brute-force attacks even if the password database is leaked. Which approach best meets these requirements?

A legal department requires proof that a contract was signed by a specific executive and that the contract has not been altered since signing. Which cryptographic mechanism should be used?

A database administrator needs to encrypt a large volume of data at rest in a way that minimizes performance overhead while still providing strong confidentiality. Which approach is most appropriate?

An organization is designing a PKI to issue certificates to employees. They want to separate the identity-verification process from the certificate-issuing process to improve security and auditability. Which PKI component should handle identity verification?

Keep studying — Network Defense Fundamentals and Controls