A company wants to secure its public website with HTTPS. They need a certificate that browsers will trust without manual installation. Which type of certificate should they obtain?

A certificate signed with the company's private key

A certificate issued by a publicly trusted CA

An organization is required to retain encrypted backup data for seven years. The encryption keys are stored in a hardware security module (HSM). The compliance team wants to ensure that if an employee with access to the HSM leaves the company, the data remains protected. Which practice is most effective?

Rotate the encryption keys immediately and re-encrypt all backup data with the new keys.

Delete the employee's user account and all associated access credentials.

Store a copy of the keys in a cloud-based key management service for redundancy.

Implement a key escrow and recovery process with separation of duties, so that no single individual can access the keys.

An organization operates its own public key infrastructure. An employee's laptop was lost, and the certificate used for email signing was stored on that laptop. What should the administrator do to prevent others from using that certificate?

Issue a new certificate for the employee with the same key pair

Delete the certificate from the CA's database

Add the certificate to the certificate revocation list (CRL)

Change the employee's email password

What is the primary purpose of securely storing cryptographic keys?

To speed up encryption operations

To prevent unauthorized access to the keys

To ensure keys are available to all users

A small company needs to encrypt data at rest on a single file server. The administrator wants the simplest solution that provides strong confidentiality with minimal performance impact. Which approach should the administrator choose?

Use a digital signature to protect the files.

Use AES-256 with a securely stored symmetric key.

Use RSA-2048 to encrypt each file individually.

Use a hash function like SHA-256 to encrypt the files.

EC-CouncilCertified Security Specialist

Domain 1Objective 6

Cryptography and PKI ECSS Practice Questions (Page 9)

Part of the Network Defense Fundamentals and Controls domain, which makes up ~21% of our current practice bank.

50questions here

10free pages

10concepts

Questions 41–45

41expert · hard
A company wants to secure its public website with HTTPS. They need a certificate that browsers will trust without manual installation. Which type of certificate should they obtain?
Select an answer first
42expert · hard
An organization is required to retain encrypted backup data for seven years. The encryption keys are stored in a hardware security module (HSM). The compliance team wants to ensure that if an employee with access to the HSM leaves the company, the data remains protected. Which practice is most effective?
Select an answer first
43application · medium
An organization operates its own public key infrastructure. An employee's laptop was lost, and the certificate used for email signing was stored on that laptop. What should the administrator do to prevent others from using that certificate?
Select an answer first
44foundation · easy
What is the primary purpose of securely storing cryptographic keys?
Select an answer first
45application · medium
A small company needs to encrypt data at rest on a single file server. The administrator wants the simplest solution that provides strong confidentiality with minimal performance impact. Which approach should the administrator choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.