A company operates a public-facing web application and uses a certificate issued by a public CA. Recently, the CA suffered a security breach and had to revoke many certificates. The company's certificate was not revoked, but the CA's root certificate is now distrusted by major browsers. What is the most appropriate action for the company?

Ask the CA to re-issue the same certificate with a new serial number.

Continue using the existing certificate and rely on OCSP stapling to prove it is still valid.

Switch to a self-signed certificate for the public site.

Obtain a new certificate from a different, trusted CA and install it on the web server.

A company wants to deploy internal web applications that use HTTPS with certificates issued by a private CA. The administrator needs to ensure that employee browsers trust these certificates. What is the most appropriate step?

Use a public CA to issue certificates for internal hostnames.

Install the private CA's root certificate in the trusted root store of each employee's browser or operating system.

Disable certificate validation in employee browsers.

Configure each web server to use a self-signed certificate.

A security team is implementing a key management policy. They want to ensure that if one key is compromised, the damage is limited to the data encrypted with that key. Which practice best achieves this?

Use the same key for all data to simplify management

Use a unique key for each data classification and rotate keys regularly

Never rotate keys to avoid downtime

Store all keys in a plaintext file on the server

EC-CouncilCertified Security Specialist

Domain 1Objective 6

Cryptography and PKI ECSS Practice Questions (Page 7)

Part of the Network Defense Fundamentals and Controls domain, which makes up ~21% of our current practice bank.

50questions here

10free pages

10concepts

Questions 31–35

31foundation · easy
Which of the following is a common hash function used for data integrity?
Select an answer first
32expert · hard
A company operates a public-facing web application and uses a certificate issued by a public CA. Recently, the CA suffered a security breach and had to revoke many certificates. The company's certificate was not revoked, but the CA's root certificate is now distrusted by major browsers. What is the most appropriate action for the company?
Select an answer first
33application · medium
A company wants to deploy internal web applications that use HTTPS with certificates issued by a private CA. The administrator needs to ensure that employee browsers trust these certificates. What is the most appropriate step?
Select an answer first
34expert · hard
A security team is implementing a key management policy. They want to ensure that if one key is compromised, the damage is limited to the data encrypted with that key. Which practice best achieves this?
Select an answer first
35foundation · easy
In asymmetric encryption, which key is used to encrypt a message that only the intended recipient can decrypt?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Cryptography and PKI ECSS Practice Questions (Page 7)

Questions 31–35

Which of the following is a common hash function used for data integrity?

A company wants to deploy internal web applications that use HTTPS with certificates issued by a private CA. The administrator needs to ensure that employee browsers trust these certificates. What is the most appropriate step?

A security team is implementing a key management policy. They want to ensure that if one key is compromised, the damage is limited to the data encrypted with that key. Which practice best achieves this?

In asymmetric encryption, which key is used to encrypt a message that only the intended recipient can decrypt?

Keep studying — Network Defense Fundamentals and Controls