CyberRevision
Continue revision → ← Subjects
CEH v13 · 20 official modules

All 5,000 CEH questions.

Search original practice content, filter by EC-Council module or exam domain, and open any question in revision mode.

0 answered overall

Showing 4,801–4,850 of 5,000 matching questions

50 per page
4801
Module 20 · Foundation Domain 1 · Background public key infrastructure Unanswered

During an authorized retail-company assessment (RET-LAB-M20-4801), which statement most accurately defines "public key infrastructure"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. A system of certificates, certificate authorities, policies, and processes that binds identities to public keys.
Practice →
4802
Module 20 · Foundation Domain 1 · Background public key infrastructure Unanswered

During a hospital incident-response exercise (HLT-SOC-M20-4802), which statement most accurately defines "public key infrastructure"?

View answer choices
  1. A system of certificates, certificate authorities, policies, and processes that binds identities to public keys.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. A staged model describing adversary activity from reconnaissance through actions on objectives.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →
4803
Module 20 · Foundation Domain 1 · Background public key infrastructure Unanswered

During a university cyber-range engagement (EDU-RANGE-M20-4803), which statement most accurately defines "public key infrastructure"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. A system of certificates, certificate authorities, policies, and processes that binds identities to public keys.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
4804
Module 20 · Applied Domain 1 · Background public key infrastructure Unanswered

During a financial-services purple-team test (FIN-PT-M20-4804), which statement most accurately defines "public key infrastructure"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. The confidentiality, integrity, and availability objectives used to reason about information security.
  3. A system of certificates, certificate authorities, policies, and processes that binds identities to public keys.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
4805
Module 20 · Applied Domain 1 · Background public key infrastructure Unanswered

During a cloud startup security audit (CLD-AUDIT-M20-4805), which statement most accurately defines "public key infrastructure"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. A system of certificates, certificate authorities, policies, and processes that binds identities to public keys.
Practice →
4806
Module 20 · Applied Domain 1 · Background public key infrastructure Unanswered

During a government risk-validation project (GOV-RISK-M20-4806), which statement most accurately defines "public key infrastructure"?

View answer choices
  1. A system of certificates, certificate authorities, policies, and processes that binds identities to public keys.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →
4807
Module 20 · Applied Domain 1 · Background public key infrastructure Unanswered

During an e-commerce application review (ECOM-WEB-M20-4807), which statement most accurately defines "public key infrastructure"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A system of certificates, certificate authorities, policies, and processes that binds identities to public keys.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
4808
Module 20 · Advanced Domain 1 · Background public key infrastructure Unanswered

During a manufacturing and OT security review (MFG-OT-M20-4808), which statement most accurately defines "public key infrastructure"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. The confidentiality, integrity, and availability objectives used to reason about information security.
  3. A system of certificates, certificate authorities, policies, and processes that binds identities to public keys.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
4809
Module 20 · Advanced Domain 1 · Background public key infrastructure Unanswered

During a mobile-services penetration test (MOB-TEST-M20-4809), which statement most accurately defines "public key infrastructure"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. A system of certificates, certificate authorities, policies, and processes that binds identities to public keys.
Practice →
4810
Module 20 · Advanced Domain 1 · Background public key infrastructure Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M20-4810), which statement most accurately defines "public key infrastructure"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. A system of certificates, certificate authorities, policies, and processes that binds identities to public keys.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
4811
Module 20 · Foundation Domain 1 · Background public key infrastructure Unanswered

During an authorized retail-company assessment (RET-LAB-M20-4811), which risk is most directly associated with "public key infrastructure"?

View answer choices
  1. Weak issuance or trust validation can enable impersonation and interception.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
4812
Module 20 · Foundation Domain 1 · Background public key infrastructure Unanswered

During a hospital incident-response exercise (HLT-SOC-M20-4812), which risk is most directly associated with "public key infrastructure"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Weak issuance or trust validation can enable impersonation and interception.
Practice →
4813
Module 20 · Foundation Domain 1 · Background public key infrastructure Unanswered

During a university cyber-range engagement (EDU-RANGE-M20-4813), which risk is most directly associated with "public key infrastructure"?

View answer choices
  1. Weak issuance or trust validation can enable impersonation and interception.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
4814
Module 20 · Applied Domain 1 · Background public key infrastructure Unanswered

During a financial-services purple-team test (FIN-PT-M20-4814), which risk is most directly associated with "public key infrastructure"?

View answer choices
  1. Unmapped detections can leave important adversary techniques without coverage.
  2. Weak issuance or trust validation can enable impersonation and interception.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
4815
Module 20 · Applied Domain 1 · Background public key infrastructure Unanswered

During a cloud startup security audit (CLD-AUDIT-M20-4815), which risk is most directly associated with "public key infrastructure"?

View answer choices
  1. Weak issuance or trust validation can enable impersonation and interception.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
4816
Module 20 · Applied Domain 1 · Background public key infrastructure Unanswered

During a government risk-validation project (GOV-RISK-M20-4816), which risk is most directly associated with "public key infrastructure"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. Weak issuance or trust validation can enable impersonation and interception.
Practice →
4817
Module 20 · Applied Domain 1 · Background public key infrastructure Unanswered

During an e-commerce application review (ECOM-WEB-M20-4817), which risk is most directly associated with "public key infrastructure"?

View answer choices
  1. Weak issuance or trust validation can enable impersonation and interception.
  2. A control focused on only one objective can leave the other security objectives exposed.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
4818
Module 20 · Advanced Domain 1 · Background public key infrastructure Unanswered

During a manufacturing and OT security review (MFG-OT-M20-4818), which risk is most directly associated with "public key infrastructure"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Weak issuance or trust validation can enable impersonation and interception.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
4819
Module 20 · Advanced Domain 1 · Background public key infrastructure Unanswered

During a mobile-services penetration test (MOB-TEST-M20-4819), which risk is most directly associated with "public key infrastructure"?

View answer choices
  1. Weak issuance or trust validation can enable impersonation and interception.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
4820
Module 20 · Advanced Domain 1 · Background public key infrastructure Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M20-4820), which risk is most directly associated with "public key infrastructure"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. Weak issuance or trust validation can enable impersonation and interception.
Practice →
4821
Module 20 · Foundation Domain 1 · Background public key infrastructure Unanswered

During an authorized retail-company assessment (RET-LAB-M20-4821), which action most directly controls the risk related to "public key infrastructure"?

View answer choices
  1. Protect CA keys, validate certificate chains, manage revocation, and automate safe renewal.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
4822
Module 20 · Foundation Domain 1 · Background public key infrastructure Unanswered

During a hospital incident-response exercise (HLT-SOC-M20-4822), which action most directly controls the risk related to "public key infrastructure"?

View answer choices
  1. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  2. Protect CA keys, validate certificate chains, manage revocation, and automate safe renewal.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
4823
Module 20 · Foundation Domain 1 · Background public key infrastructure Unanswered

During a university cyber-range engagement (EDU-RANGE-M20-4823), which action most directly controls the risk related to "public key infrastructure"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Protect CA keys, validate certificate chains, manage revocation, and automate safe renewal.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
4824
Module 20 · Applied Domain 1 · Background public key infrastructure Unanswered

During a financial-services purple-team test (FIN-PT-M20-4824), which action most directly controls the risk related to "public key infrastructure"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Protect CA keys, validate certificate chains, manage revocation, and automate safe renewal.
Practice →
4825
Module 20 · Applied Domain 1 · Background public key infrastructure Unanswered

During a cloud startup security audit (CLD-AUDIT-M20-4825), which action most directly controls the risk related to "public key infrastructure"?

View answer choices
  1. Protect CA keys, validate certificate chains, manage revocation, and automate safe renewal.
  2. Map each asset and threat to confidentiality, integrity, and availability requirements.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
4826
Module 20 · Applied Domain 1 · Background public key infrastructure Unanswered

During a government risk-validation project (GOV-RISK-M20-4826), which action most directly controls the risk related to "public key infrastructure"?

View answer choices
  1. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  2. Protect CA keys, validate certificate chains, manage revocation, and automate safe renewal.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
4827
Module 20 · Applied Domain 1 · Background public key infrastructure Unanswered

During an e-commerce application review (ECOM-WEB-M20-4827), which action most directly controls the risk related to "public key infrastructure"?

View answer choices
  1. Protect CA keys, validate certificate chains, manage revocation, and automate safe renewal.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
4828
Module 20 · Advanced Domain 1 · Background public key infrastructure Unanswered

During a manufacturing and OT security review (MFG-OT-M20-4828), which action most directly controls the risk related to "public key infrastructure"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Protect CA keys, validate certificate chains, manage revocation, and automate safe renewal.
Practice →
4829
Module 20 · Advanced Domain 1 · Background public key infrastructure Unanswered

During a mobile-services penetration test (MOB-TEST-M20-4829), which action most directly controls the risk related to "public key infrastructure"?

View answer choices
  1. Protect CA keys, validate certificate chains, manage revocation, and automate safe renewal.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
4830
Module 20 · Advanced Domain 1 · Background public key infrastructure Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M20-4830), which action most directly controls the risk related to "public key infrastructure"?

View answer choices
  1. Protect CA keys, validate certificate chains, manage revocation, and automate safe renewal.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
4831
Module 20 · Foundation Domain 1 · Background public key infrastructure Unanswered

During an authorized retail-company assessment (RET-LAB-M20-4831), which evidence best supports an assessment of "public key infrastructure"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A validated certificate chain with identity, validity, usage, and revocation evidence.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
4832
Module 20 · Foundation Domain 1 · Background public key infrastructure Unanswered

During a hospital incident-response exercise (HLT-SOC-M20-4832), which evidence best supports an assessment of "public key infrastructure"?

View answer choices
  1. A validated certificate chain with identity, validity, usage, and revocation evidence.
  2. A risk register linking assets to CIA impact ratings.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
4833
Module 20 · Foundation Domain 1 · Background public key infrastructure Unanswered

During a university cyber-range engagement (EDU-RANGE-M20-4833), which evidence best supports an assessment of "public key infrastructure"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A risk register linking assets to CIA impact ratings.
  4. A validated certificate chain with identity, validity, usage, and revocation evidence.
Practice →
4834
Module 20 · Applied Domain 1 · Background public key infrastructure Unanswered

During a financial-services purple-team test (FIN-PT-M20-4834), which evidence best supports an assessment of "public key infrastructure"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A validated certificate chain with identity, validity, usage, and revocation evidence.
  4. A risk register linking assets to CIA impact ratings.
Practice →
4835
Module 20 · Applied Domain 1 · Background public key infrastructure Unanswered

During a cloud startup security audit (CLD-AUDIT-M20-4835), which evidence best supports an assessment of "public key infrastructure"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A validated certificate chain with identity, validity, usage, and revocation evidence.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
4836
Module 20 · Applied Domain 1 · Background public key infrastructure Unanswered

During a government risk-validation project (GOV-RISK-M20-4836), which evidence best supports an assessment of "public key infrastructure"?

View answer choices
  1. A validated certificate chain with identity, validity, usage, and revocation evidence.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A risk register linking assets to CIA impact ratings.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
4837
Module 20 · Applied Domain 1 · Background public key infrastructure Unanswered

During an e-commerce application review (ECOM-WEB-M20-4837), which evidence best supports an assessment of "public key infrastructure"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A risk register linking assets to CIA impact ratings.
  4. A validated certificate chain with identity, validity, usage, and revocation evidence.
Practice →
4838
Module 20 · Advanced Domain 1 · Background public key infrastructure Unanswered

During a manufacturing and OT security review (MFG-OT-M20-4838), which evidence best supports an assessment of "public key infrastructure"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A validated certificate chain with identity, validity, usage, and revocation evidence.
  4. A risk register linking assets to CIA impact ratings.
Practice →
4839
Module 20 · Advanced Domain 1 · Background public key infrastructure Unanswered

During a mobile-services penetration test (MOB-TEST-M20-4839), which evidence best supports an assessment of "public key infrastructure"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A validated certificate chain with identity, validity, usage, and revocation evidence.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
4840
Module 20 · Advanced Domain 1 · Background public key infrastructure Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M20-4840), which evidence best supports an assessment of "public key infrastructure"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. A validated certificate chain with identity, validity, usage, and revocation evidence.
Practice →
4841
Module 20 · Foundation Domain 1 · Background symmetric encryption Unanswered

During an authorized retail-company assessment (RET-LAB-M20-4841), which statement most accurately defines "symmetric encryption"?

View answer choices
  1. Encryption in which the same secret key is used for encryption and decryption.
  2. The confidentiality, integrity, and availability objectives used to reason about information security.
  3. A staged model describing adversary activity from reconnaissance through actions on objectives.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
4842
Module 20 · Foundation Domain 1 · Background symmetric encryption Unanswered

During a hospital incident-response exercise (HLT-SOC-M20-4842), which statement most accurately defines "symmetric encryption"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. Encryption in which the same secret key is used for encryption and decryption.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
4843
Module 20 · Foundation Domain 1 · Background symmetric encryption Unanswered

During a university cyber-range engagement (EDU-RANGE-M20-4843), which statement most accurately defines "symmetric encryption"?

View answer choices
  1. Encryption in which the same secret key is used for encryption and decryption.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. A staged model describing adversary activity from reconnaissance through actions on objectives.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →
4844
Module 20 · Applied Domain 1 · Background symmetric encryption Unanswered

During a financial-services purple-team test (FIN-PT-M20-4844), which statement most accurately defines "symmetric encryption"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. Encryption in which the same secret key is used for encryption and decryption.
Practice →
4845
Module 20 · Applied Domain 1 · Background symmetric encryption Unanswered

During a cloud startup security audit (CLD-AUDIT-M20-4845), which statement most accurately defines "symmetric encryption"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. The confidentiality, integrity, and availability objectives used to reason about information security.
  3. Encryption in which the same secret key is used for encryption and decryption.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
4846
Module 20 · Applied Domain 1 · Background symmetric encryption Unanswered

During a government risk-validation project (GOV-RISK-M20-4846), which statement most accurately defines "symmetric encryption"?

View answer choices
  1. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  2. Encryption in which the same secret key is used for encryption and decryption.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
4847
Module 20 · Applied Domain 1 · Background symmetric encryption Unanswered

During an e-commerce application review (ECOM-WEB-M20-4847), which statement most accurately defines "symmetric encryption"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. Encryption in which the same secret key is used for encryption and decryption.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →
4848
Module 20 · Advanced Domain 1 · Background symmetric encryption Unanswered

During a manufacturing and OT security review (MFG-OT-M20-4848), which statement most accurately defines "symmetric encryption"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. Encryption in which the same secret key is used for encryption and decryption.
Practice →
4849
Module 20 · Advanced Domain 1 · Background symmetric encryption Unanswered

During a mobile-services penetration test (MOB-TEST-M20-4849), which statement most accurately defines "symmetric encryption"?

View answer choices
  1. Encryption in which the same secret key is used for encryption and decryption.
  2. The confidentiality, integrity, and availability objectives used to reason about information security.
  3. A staged model describing adversary activity from reconnaissance through actions on objectives.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
4850
Module 20 · Advanced Domain 1 · Background symmetric encryption Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M20-4850), which statement most accurately defines "symmetric encryption"?

View answer choices
  1. Encryption in which the same secret key is used for encryption and decryption.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. A staged model describing adversary activity from reconnaissance through actions on objectives.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →