A company needs to encrypt a large database backup before storing it in the cloud. The backup is 500 GB. The company wants to use a fast encryption algorithm and also verify the integrity of the backup after upload. Which combination should they use?

ECC for encryption and SHA-256 for integrity

RSA-2048 for encryption and MD5 for integrity

DES for encryption and SHA-1 for integrity

AES-256 for encryption and SHA-256 for integrity

A user receives a signed message from a colleague. The user wants to verify that the message was indeed signed by the colleague and has not been altered. What does the user need to do?

Decrypt the message with the colleague's public key

Verify the signature using the colleague's public key

Encrypt the message with the colleague's private key

Hash the message and compare to the signature

An organization uses a legacy system that encrypts data with DES. A security audit flags this as a risk. Which action should the organization take to mitigate the vulnerability?

Use DES in triple encryption mode (3DES) and keep the same key.

Replace DES with AES-256 for all encryption operations.

Increase the DES key size to 128 bits by padding the key.

Use a hash of the DES key as a new key for the same algorithm.

A small law firm needs to encrypt case files stored on a shared on-premises server. The files are accessed only by staff on the internal network, and the firm wants to minimize key management overhead. The IT admin also wants to detect any unauthorized modification of the files. Which approach best meets these requirements?

Use DES with a 56-bit key and rely on the server's file permissions for integrity.

Use MD5 hashes to encrypt the files and store the hash as the encryption key.

Use RSA-2048 to encrypt each file with the admin's public key and store the private key on a USB drive.

Use AES-256 with a single shared key and compute SHA-256 hashes of the files periodically.

A mobile app needs to verify that software updates come from the vendor and have not been altered. The app has limited processing power and battery. Which cryptographic approach should the developer choose?

Use a symmetric key embedded in the app to encrypt the updates.

Use MD5 hashes to verify the updates and trust the hash from the vendor's website.

Use RSA-4096 to sign each update and verify with the public key.

Use ECC-based digital signatures to sign the updates, and verify them with the vendor's public key.

EC-CouncilNetwork Defense Essentials

Domain 6Objective 1

Cryptographic Techniques and Algorithms NDE Practice Questions (Page 3)

Part of the Cryptography, PKI, and Data Security domain, which makes up ~15% of our current practice bank.

39questions here

8free pages

6concepts

Questions 11–15

11application · medium
A company needs to encrypt a large database backup before storing it in the cloud. The backup is 500 GB. The company wants to use a fast encryption algorithm and also verify the integrity of the backup after upload. Which combination should they use?
Select an answer first
12application · medium
A user receives a signed message from a colleague. The user wants to verify that the message was indeed signed by the colleague and has not been altered. What does the user need to do?
Select an answer first
13application · medium
An organization uses a legacy system that encrypts data with DES. A security audit flags this as a risk. Which action should the organization take to mitigate the vulnerability?
Select an answer first
14application · medium
A small law firm needs to encrypt case files stored on a shared on-premises server. The files are accessed only by staff on the internal network, and the firm wants to minimize key management overhead. The IT admin also wants to detect any unauthorized modification of the files. Which approach best meets these requirements?
Select an answer first
15application · medium
A mobile app needs to verify that software updates come from the vendor and have not been altered. The app has limited processing power and battery. Which cryptographic approach should the developer choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.