A network engineer is configuring a VPN that will carry highly sensitive, latency-sensitive traffic across a WAN link. The VPN must ensure that identical plaintext blocks do not produce identical ciphertext blocks. Which encryption configuration best meets this requirement?

Use a stream cipher like RC4 with a static key.

Use AES in ECB mode with a fixed key.

Use AES in CTR mode with a fixed nonce.

Use AES in CBC mode with a random IV for each packet.

In a hybrid encryption system, which key is typically used to encrypt the actual data payload?

A randomly generated symmetric session key

Which scenario is a typical use case for a stream cipher?

Encrypting a large file stored on disk

Encrypting a real-time voice call

Two branch offices need to exchange encrypted files over the internet. They agree to use a symmetric algorithm. What is the primary challenge they must address before any encrypted communication can occur?

Ensuring the algorithm is approved by a standards body

Securely distributing the shared symmetric key to both offices

Generating a public/private key pair for each office

Choosing a block cipher mode that supports large files

Which practice is a key principle of secure key management?

Storing keys in a hardware security module (HSM)

Using the same key for all systems to simplify management

Embedding keys in application source code for easy access

Sharing keys over email for convenience

EC-CouncilNetwork Defense Essentials

Domain 6Objective 3

Data Encryption Techniques NDE Practice Questions (Page 5)

Part of the Cryptography, PKI, and Data Security domain, which makes up ~15% of our current practice bank.

44questions here

9free pages

7concepts

Questions 21–25

21application · medium
A network engineer is configuring a VPN that will carry highly sensitive, latency-sensitive traffic across a WAN link. The VPN must ensure that identical plaintext blocks do not produce identical ciphertext blocks. Which encryption configuration best meets this requirement?
Select an answer first
22foundation · easy
In a hybrid encryption system, which key is typically used to encrypt the actual data payload?
Select an answer first
23foundation · easy
Which scenario is a typical use case for a stream cipher?
Select an answer first
24application · easy
Two branch offices need to exchange encrypted files over the internet. They agree to use a symmetric algorithm. What is the primary challenge they must address before any encrypted communication can occur?
Select an answer first
25foundation · easy
Which practice is a key principle of secure key management?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.