CEH v13 Domain 9.1 Practice Test 004

This practice test covers Domain 9 (Cryptography) Subdomain 1 (Cryptography) from the CEH v13 (312-50v13) exam blueprint (v5).

These questions are inspired by the EC-Council CEH exam and are designed to help you test your knowledge of ethical hacking tools, techniques, and methodologies. Some questions require multiple correct answers.

These are not official exam questions or brain dumps. They are original scenario-based questions created to reflect the skills and knowledge tested in the CEH exam.

Note: CEH and Certified Ethical Hacker are registered trademarks of EC-Council. This content is not affiliated with or endorsed by EC-Council.

To choose CEH practice tests based on specific domains and subdomains, click that link

CEH v13 Domain 9.1 Practice Test 004

10 questions • 8 single-answer, 2 multi-select

Question 1

Elijah, a security engineer, must select a symmetric block cipher operating on 128-bit blocks that supports 128, 192, and 256-bit keys for an enterprise VPN. He needs the NIST-approved standard that replaced the aging Data Encryption Standard. Which algorithm should he choose?

A. RSA B. AES C. Blowfish D. Triple DES

Question 2

Jane, a PKI administrator, configures the trusted entity that issues, digitally signs, and revokes certificates within an enterprise hierarchy. She must name the authority that ultimately binds a verified identity to its public key. Which entity is described?

A. Registration Authority B. Key escrow agent C. OCSP responder D. Certificate Authority

Question 3

A penetration tester captures a fixed-length digest produced from a password file and must identify the one-way function used. The algorithm belongs to the SHA-2 family and outputs a 32-byte hash widely used for integrity verification. Which hashing algorithm produced it?

A. SHA-256 B. MD5 C. RC4 D. HMAC

Question 4

Kevin intercepts both a plaintext message and its corresponding ciphertext, then uses these pairs to deduce the secret key of a cipher. He recognizes this method as a specific class of cryptanalytic attack. Which attack is he performing?

A. Ciphertext-only attack B. Brute-force attack C. Known-plaintext attack D. Side-channel attack

Question 5

A security team must deploy full-disk encryption on Windows enterprise laptops to protect data at rest by integrating with the TPM chip. They want the native Microsoft solution rather than a third-party product. Which tool meets the requirement?

A. VeraCrypt B. BitLocker C. FileVault D. GnuPG

Question 6

Select all that apply

Elena, a security architect, reviews her organization's cryptographic deployment to defend against key-recovery and downgrade attacks. She compiles a list of recommended hardening measures for the encryption stack. Which of the following are valid countermeasures? (Select all that apply)

A. Using DES for speed B. Hardcoding keys in source C. Using longer key lengths D. Disabling certificate validation E. Avoiding deprecated algorithms

Question 7

Robert needs to send a signed and encrypted email using a standard that relies on X.509 certificates and is built into most enterprise mail clients. He compares it against PGP-based alternatives before deciding. Which standard relies on X.509 certificates for this purpose?

A. S/MIME B. PGP C. SSL D. IPsec

Question 8

A developer must implement an asymmetric algorithm whose security rests on the difficulty of factoring the product of two large prime numbers. The keys are used for both encryption and digital signatures. Which algorithm is based on this hard problem?

A. AES B. Diffie-Hellman C. RSA D. ECC

Question 9

Marcus discovers that two distinct input files produce the identical hash value, undermining the integrity guarantee of the algorithm. He recognizes this as the exploitation of a specific hash weakness. What is this condition called?

A. Salting B. Key stretching C. Rainbow table D. Collision

Question 10

Select all that apply

Nadia, a penetration tester, assembles a toolkit to perform password hash cracking and cryptanalysis during an engagement. She selects tools designed specifically to recover plaintext from captured hashes. Which of the following are cryptographic cracking tools? (Choose two)

A. Wireshark B. Hashcat C. Nmap D. John the Ripper E. Nessus

Related Posts

Leave a Comment Cancel Reply