A startup is building a secure messaging app. They want to ensure that messages are encrypted in transit and that the server cannot read the message contents. They also want to minimize the computational overhead on mobile devices. Which encryption design should they choose?

Use a shared symmetric key stored on the server and distribute it to users.

Use only asymmetric encryption for each message with the recipient's public key.

Use end-to-end encryption with a hybrid scheme: a symmetric key encrypts the message, and the symmetric key is encrypted with the recipient's public key.

Use TLS only between the client and server.

A hospital is deploying laptops for field clinicians. The laptops will store patient records and must protect data if a device is lost or stolen. Which encryption application should be implemented?

Use a VPN for all network traffic.

Full-disk encryption using BitLocker or FileVault.

Encrypt only the patient database file with a password-protected ZIP.

Use SSL/TLS for the hospital's web portal.

A government agency requires that encryption keys be stored in a hardware security module (HSM) and that keys be backed up in case the HSM fails. Which key management practice should be followed?

Store keys in a plaintext file on a network share.

Store keys in the HSM and also in the application's configuration file.

Generate keys inside the HSM and export them encrypted for backup.

Store keys only in the HSM and do not back them up.

An organization's security policy requires that encryption keys be rotated every 90 days. The current system uses a single symmetric key to encrypt all data. The administrator is concerned about the effort of re-encrypting all data with a new key. Which approach minimizes the need to re-encrypt all data during key rotation?

Disable key rotation and rely on the algorithm's strength

Use asymmetric encryption and rotate the private key

Rotate the symmetric key and re-encrypt all data with the new key

Use a key-encryption key (KEK) to wrap the data-encryption key (DEK); rotate the KEK and re-wrap the DEK

EC-CouncilNetwork Defense Essentials

Domain 6Objective 3

Data Encryption Techniques NDE Practice Questions (Page 2)

Part of the Cryptography, PKI, and Data Security domain, which makes up ~15% of our current practice bank.

44questions here

9free pages

7concepts

Questions 6–10

6application · medium
A startup is building a secure messaging app. They want to ensure that messages are encrypted in transit and that the server cannot read the message contents. They also want to minimize the computational overhead on mobile devices. Which encryption design should they choose?
Select an answer first
7foundation · easy
Which algorithm is an example of asymmetric encryption?
Select an answer first
8application · medium
A hospital is deploying laptops for field clinicians. The laptops will store patient records and must protect data if a device is lost or stolen. Which encryption application should be implemented?
Select an answer first
9application · medium
A government agency requires that encryption keys be stored in a hardware security module (HSM) and that keys be backed up in case the HSM fails. Which key management practice should be followed?
Select an answer first
10application · medium
An organization's security policy requires that encryption keys be rotated every 90 days. The current system uses a single symmetric key to encrypt all data. The administrator is concerned about the effort of re-encrypting all data with a new key. Which approach minimizes the need to re-encrypt all data during key rotation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.

Data Encryption Techniques NDE Practice Questions (Page 2)

Questions 6–10

A startup is building a secure messaging app. They want to ensure that messages are encrypted in transit and that the server cannot read the message contents. They also want to minimize the computational overhead on mobile devices. Which encryption design should they choose?

Which algorithm is an example of asymmetric encryption?

A hospital is deploying laptops for field clinicians. The laptops will store patient records and must protect data if a device is lost or stolen. Which encryption application should be implemented?

A government agency requires that encryption keys be stored in a hardware security module (HSM) and that keys be backed up in case the HSM fails. Which key management practice should be followed?

Keep studying — Cryptography, PKI, and Data Security