Which of the following is a best practice for cryptographic key management?

Storing keys in the same location as the encrypted data

Using the same key for all systems to simplify management

Sharing keys over email for convenience

A security engineer is investigating a suspected side-channel attack on a server that performs RSA decryption. The attacker appears to have recovered the private key by measuring the server's power consumption during decryption operations. The engineer must choose a mitigation that prevents this class of attack without replacing the server hardware. Which mitigation is most effective?

Rotate the RSA key pair every 24 hours.

Increase the RSA key size from 2048 to 4096 bits.

Switch from RSA to ECC with a 256-bit key.

Implement constant-time algorithms for RSA decryption.

A company needs to encrypt a large database backup file before storing it in the cloud. The backup is 500 GB. The security team wants to minimize performance impact and avoid the complexity of managing multiple keys. Which encryption approach is most appropriate?

Use SHA-256 to encrypt the backup file.

Use AES-256 with a single symmetric key.

Use ECC with a different key for each block of the file.

Use RSA-2048 to encrypt the entire backup file.

EC-CouncilEthical Hacking Essentials

Domain 1Objective 3

Cryptography Concepts EHE Practice Questions (Page 2)

Part of the Information Security and Ethical Hacking Foundations domain, which makes up ~16% of our current practice bank.

39questions here

8free pages

7concepts

Questions 6–10

6foundation · easy
Which of the following is an asymmetric encryption algorithm?
Select an answer first
7foundation · easy
Which of the following is a best practice for cryptographic key management?
Select an answer first
8expert · hard
A security engineer is investigating a suspected side-channel attack on a server that performs RSA decryption. The attacker appears to have recovered the private key by measuring the server's power consumption during decryption operations. The engineer must choose a mitigation that prevents this class of attack without replacing the server hardware. Which mitigation is most effective?
Select an answer first
9foundation · easy
Which cryptographic attack exploits the physical implementation of a cryptosystem, such as timing or power consumption?
Select an answer first
10application · medium
A company needs to encrypt a large database backup file before storing it in the cloud. The backup is 500 GB. The security team wants to minimize performance impact and avoid the complexity of managing multiple keys. Which encryption approach is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Cryptography Concepts EHE Practice Questions (Page 2)

Questions 6–10

Which of the following is an asymmetric encryption algorithm?

Which of the following is a best practice for cryptographic key management?

Which cryptographic attack exploits the physical implementation of a cryptosystem, such as timing or power consumption?

A company needs to encrypt a large database backup file before storing it in the cloud. The backup is 500 GB. The security team wants to minimize performance impact and avoid the complexity of managing multiple keys. Which encryption approach is most appropriate?

Keep studying — Information Security and Ethical Hacking Foundations