A company needs to encrypt data in transit between two data centers over the internet. The data is highly sensitive, and the company wants to ensure that even if the connection is intercepted, the attacker cannot decrypt the data. The company also wants to avoid the complexity of managing pre-shared keys. Which approach best meets these requirements?

Use a VPN with a static symmetric key.

Use SSH with password authentication.

Use IPsec with pre-shared keys.

Use TLS with certificates issued by a public certificate authority.

A company's security policy requires that encryption keys be rotated every 90 days. However, the company stores years of archived data encrypted with old keys. The compliance team is concerned that rotating keys will make archived data unreadable. What is the best practice to address this?

Keep the same key for archived data and only rotate keys for new data.

Use a key hierarchy where a master key encrypts data-encryption keys, and rotate the master key while retaining old data-encryption keys for decryption.

Re-encrypt all archived data with the new key every 90 days.

Delete archived data that is older than the key rotation period.

A company needs to encrypt data at rest in a database. The data is accessed by multiple internal applications, and the company wants to minimize the performance impact of encryption while maintaining strong security. Which approach should they choose?

Use a hash of the data as the encryption key.

Use AES-256 with a single key managed by a key management service.

Use RSA-2048 to encrypt each database row individually.

Use ECC with a 256-bit key to encrypt the entire database file.

EC-CouncilEthical Hacking Essentials

Domain 1Objective 3

Cryptography Concepts EHE Practice Questions (Page 6)

Part of the Information Security and Ethical Hacking Foundations domain, which makes up ~16% of our current practice bank.

39questions here

8free pages

7concepts

Questions 26–30

26foundation · easy
Which cryptographic goal is primarily concerned with ensuring that data has not been modified during transmission?
Select an answer first
27expert · hard
A company needs to encrypt data in transit between two data centers over the internet. The data is highly sensitive, and the company wants to ensure that even if the connection is intercepted, the attacker cannot decrypt the data. The company also wants to avoid the complexity of managing pre-shared keys. Which approach best meets these requirements?
Select an answer first
28expert · hard
A company's security policy requires that encryption keys be rotated every 90 days. However, the company stores years of archived data encrypted with old keys. The compliance team is concerned that rotating keys will make archived data unreadable. What is the best practice to address this?
Select an answer first
29application · medium
A company needs to encrypt data at rest in a database. The data is accessed by multiple internal applications, and the company wants to minimize the performance impact of encryption while maintaining strong security. Which approach should they choose?
Select an answer first
30application · medium
A security analyst notices that an attacker is capturing encrypted traffic between a user and a server. The attacker then forwards the captured traffic to the server, making the server respond as if the attacker were the legitimate user. This is an example of which type of attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Cryptography Concepts EHE Practice Questions (Page 6)

Questions 26–30

Which cryptographic goal is primarily concerned with ensuring that data has not been modified during transmission?

A company's security policy requires that encryption keys be rotated every 90 days. However, the company stores years of archived data encrypted with old keys. The compliance team is concerned that rotating keys will make archived data unreadable. What is the best practice to address this?

A company needs to encrypt data at rest in a database. The data is accessed by multiple internal applications, and the company wants to minimize the performance impact of encryption while maintaining strong security. Which approach should they choose?

A security analyst notices that an attacker is capturing encrypted traffic between a user and a server. The attacker then forwards the captured traffic to the server, making the server respond as if the attacker were the legitimate user. This is an example of which type of attack?

Keep studying — Information Security and Ethical Hacking Foundations