A software development team wants to verify that a downloaded open-source library has not been modified since the original author published it. The author provides a SHA-256 hash of the library. What should the team do to verify integrity?

Compare the file size to the size listed on the website.

Compute the SHA-256 hash of the downloaded file and compare it to the published hash.

Run the library in a sandbox to see if it behaves correctly.

Decrypt the file with the author's public key.

What is the primary purpose of a digital signature?

To compress the message for faster transmission

To ensure the message is not read by unauthorized parties

To provide authenticity and non-repudiation

To encrypt the entire message for confidentiality

A small business wants to encrypt files stored on a USB drive used by two employees. The employees work in the same office and share the drive. The business wants a fast, simple solution that does not require a public key infrastructure. Which encryption approach best fits this scenario?

Use RSA with each employee's public key to encrypt the files.

Use a hash function like SHA-256 to encrypt the files.

Use AES with a shared passphrase that both employees know.

Use ECC to encrypt the files with a single private key.

An organization's security policy requires that encryption keys be changed regularly to limit the impact of a potential key compromise. The organization uses AES-256 for file encryption. Which practice best satisfies this policy?

Generate a new key for each file and store all keys in the same key file.

Reuse the same key for all files but change it every five years.

Encrypt the key with the data and store them together.

Use a key management system that supports automatic key rotation and secure key storage.

EC-CouncilEthical Hacking Essentials

Domain 1Objective 3

Cryptography Concepts EHE Practice Questions (Page 7)

Part of the Information Security and Ethical Hacking Foundations domain, which makes up ~16% of our current practice bank.

39questions here

8free pages

7concepts

Questions 31–35

31foundation · easy
In asymmetric encryption, which key is used to encrypt a message that only the intended recipient can decrypt?
Select an answer first
32application · medium
A software development team wants to verify that a downloaded open-source library has not been modified since the original author published it. The author provides a SHA-256 hash of the library. What should the team do to verify integrity?
Select an answer first
33foundation · easy
What is the primary purpose of a digital signature?
Select an answer first
34application · medium
A small business wants to encrypt files stored on a USB drive used by two employees. The employees work in the same office and share the drive. The business wants a fast, simple solution that does not require a public key infrastructure. Which encryption approach best fits this scenario?
Select an answer first
35application · medium
An organization's security policy requires that encryption keys be changed regularly to limit the impact of a potential key compromise. The organization uses AES-256 for file encryption. Which practice best satisfies this policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.