What is the primary application of the S/MIME protocol?

Securing email messages with encryption and digital signatures

Authenticating users on a network

A multinational corporation is establishing a PKI for internal use across multiple subsidiaries. They want a single point of trust that all employees can rely on, with the ability to delegate certificate issuance to regional teams. Which trust model best fits this requirement?

Mesh trust model where every CA cross-certifies with every other CA

A single standalone CA with no subordinate CAs

Web of trust model where users validate each other's certificates

Hierarchical trust model with a root CA at the top and subordinate CAs for each region

An organization is planning to migrate from a single CA to a two-tier hierarchy with an offline root. The current CA has issued certificates with a 10-year validity period. The security team wants to minimize the risk of a compromised root key. Which approach is most effective?

Extend the validity of all existing certificates to 20 years to reduce re-issuance frequency

Keep the existing CA online but add a hardware security module to protect the root key

Use the same root key but move it to an offline server

Create a new offline root and issue new subordinate CAs, then gradually re-issue certificates with shorter validity periods

A small business wants to enable secure HTTPS on its public website without the overhead of managing its own CA. Which PKI approach should the business choose?

Use a certificate from another company's private CA

Build an internal CA and distribute its root certificate to all potential visitors

Obtain a certificate from a public CA that is already trusted by web browsers

Create a self-signed certificate and install it on the web server

Why is certificate revocation important in a PKI?

It ensures that compromised or no-longer-trusted certificates are invalidated before their expiration date

It encrypts the certificate's private key

It automatically renews certificates

It extends the validity period of certificates

EC-CouncilNetwork Defense Essentials

Domain 6Objective 2

Public Key Infrastructure (PKI) and Digital Certificates NDE Practice Questions (Page 4)

Part of the Cryptography, PKI, and Data Security domain, which makes up ~15% of our current practice bank.

44questions here

9free pages

10concepts

Questions 16–20

16foundation · easy
What is the primary application of the S/MIME protocol?
Select an answer first
17application · medium
A multinational corporation is establishing a PKI for internal use across multiple subsidiaries. They want a single point of trust that all employees can rely on, with the ability to delegate certificate issuance to regional teams. Which trust model best fits this requirement?
Select an answer first
18expert · hard
An organization is planning to migrate from a single CA to a two-tier hierarchy with an offline root. The current CA has issued certificates with a 10-year validity period. The security team wants to minimize the risk of a compromised root key. Which approach is most effective?
Select an answer first
19application · medium
A small business wants to enable secure HTTPS on its public website without the overhead of managing its own CA. Which PKI approach should the business choose?
Select an answer first
20foundation · easy
Why is certificate revocation important in a PKI?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.