CyberRevision
Continue revision → ← Subjects
CEH v13 · 20 official modules

All 5,000 CEH questions.

Search original practice content, filter by EC-Council module or exam domain, and open any question in revision mode.

0 answered overall

Showing 4,851–4,900 of 5,000 matching questions

50 per page
4851
Module 20 · Foundation Domain 1 · Background symmetric encryption Unanswered

During an authorized retail-company assessment (RET-LAB-M20-4851), which risk is most directly associated with "symmetric encryption"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Exposure of the shared key compromises confidentiality for every party using it.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
4852
Module 20 · Foundation Domain 1 · Background symmetric encryption Unanswered

During a hospital incident-response exercise (HLT-SOC-M20-4852), which risk is most directly associated with "symmetric encryption"?

View answer choices
  1. Exposure of the shared key compromises confidentiality for every party using it.
  2. A control focused on only one objective can leave the other security objectives exposed.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
4853
Module 20 · Foundation Domain 1 · Background symmetric encryption Unanswered

During a university cyber-range engagement (EDU-RANGE-M20-4853), which risk is most directly associated with "symmetric encryption"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Exposure of the shared key compromises confidentiality for every party using it.
Practice →
4854
Module 20 · Applied Domain 1 · Background symmetric encryption Unanswered

During a financial-services purple-team test (FIN-PT-M20-4854), which risk is most directly associated with "symmetric encryption"?

View answer choices
  1. Exposure of the shared key compromises confidentiality for every party using it.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
4855
Module 20 · Applied Domain 1 · Background symmetric encryption Unanswered

During a cloud startup security audit (CLD-AUDIT-M20-4855), which risk is most directly associated with "symmetric encryption"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Exposure of the shared key compromises confidentiality for every party using it.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
4856
Module 20 · Applied Domain 1 · Background symmetric encryption Unanswered

During a government risk-validation project (GOV-RISK-M20-4856), which risk is most directly associated with "symmetric encryption"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. A control focused on only one objective can leave the other security objectives exposed.
  3. Exposure of the shared key compromises confidentiality for every party using it.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
4857
Module 20 · Applied Domain 1 · Background symmetric encryption Unanswered

During an e-commerce application review (ECOM-WEB-M20-4857), which risk is most directly associated with "symmetric encryption"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. Exposure of the shared key compromises confidentiality for every party using it.
Practice →
4858
Module 20 · Advanced Domain 1 · Background symmetric encryption Unanswered

During a manufacturing and OT security review (MFG-OT-M20-4858), which risk is most directly associated with "symmetric encryption"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Exposure of the shared key compromises confidentiality for every party using it.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
4859
Module 20 · Advanced Domain 1 · Background symmetric encryption Unanswered

During a mobile-services penetration test (MOB-TEST-M20-4859), which risk is most directly associated with "symmetric encryption"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Exposure of the shared key compromises confidentiality for every party using it.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
4860
Module 20 · Advanced Domain 1 · Background symmetric encryption Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M20-4860), which risk is most directly associated with "symmetric encryption"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. A control focused on only one objective can leave the other security objectives exposed.
  3. Exposure of the shared key compromises confidentiality for every party using it.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
4861
Module 20 · Foundation Domain 1 · Background symmetric encryption Unanswered

During an authorized retail-company assessment (RET-LAB-M20-4861), which action most directly controls the risk related to "symmetric encryption"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Use strong algorithms, protected key storage, rotation, and secure key distribution.
Practice →
4862
Module 20 · Foundation Domain 1 · Background symmetric encryption Unanswered

During a hospital incident-response exercise (HLT-SOC-M20-4862), which action most directly controls the risk related to "symmetric encryption"?

View answer choices
  1. Use strong algorithms, protected key storage, rotation, and secure key distribution.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
4863
Module 20 · Foundation Domain 1 · Background symmetric encryption Unanswered

During a university cyber-range engagement (EDU-RANGE-M20-4863), which action most directly controls the risk related to "symmetric encryption"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Use strong algorithms, protected key storage, rotation, and secure key distribution.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
4864
Module 20 · Applied Domain 1 · Background symmetric encryption Unanswered

During a financial-services purple-team test (FIN-PT-M20-4864), which action most directly controls the risk related to "symmetric encryption"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map each asset and threat to confidentiality, integrity, and availability requirements.
  3. Use strong algorithms, protected key storage, rotation, and secure key distribution.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
4865
Module 20 · Applied Domain 1 · Background symmetric encryption Unanswered

During a cloud startup security audit (CLD-AUDIT-M20-4865), which action most directly controls the risk related to "symmetric encryption"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Use strong algorithms, protected key storage, rotation, and secure key distribution.
Practice →
4866
Module 20 · Applied Domain 1 · Background symmetric encryption Unanswered

During a government risk-validation project (GOV-RISK-M20-4866), which action most directly controls the risk related to "symmetric encryption"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Use strong algorithms, protected key storage, rotation, and secure key distribution.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
4867
Module 20 · Applied Domain 1 · Background symmetric encryption Unanswered

During an e-commerce application review (ECOM-WEB-M20-4867), which action most directly controls the risk related to "symmetric encryption"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Use strong algorithms, protected key storage, rotation, and secure key distribution.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
4868
Module 20 · Advanced Domain 1 · Background symmetric encryption Unanswered

During a manufacturing and OT security review (MFG-OT-M20-4868), which action most directly controls the risk related to "symmetric encryption"?

View answer choices
  1. Use strong algorithms, protected key storage, rotation, and secure key distribution.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
4869
Module 20 · Advanced Domain 1 · Background symmetric encryption Unanswered

During a mobile-services penetration test (MOB-TEST-M20-4869), which action most directly controls the risk related to "symmetric encryption"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Use strong algorithms, protected key storage, rotation, and secure key distribution.
Practice →
4870
Module 20 · Advanced Domain 1 · Background symmetric encryption Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M20-4870), which action most directly controls the risk related to "symmetric encryption"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Use strong algorithms, protected key storage, rotation, and secure key distribution.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
4871
Module 20 · Foundation Domain 1 · Background symmetric encryption Unanswered

During an authorized retail-company assessment (RET-LAB-M20-4871), which evidence best supports an assessment of "symmetric encryption"?

View answer choices
  1. Cryptographic configuration showing algorithm, mode, key size, and key-management process.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A risk register linking assets to CIA impact ratings.
Practice →
4872
Module 20 · Foundation Domain 1 · Background symmetric encryption Unanswered

During a hospital incident-response exercise (HLT-SOC-M20-4872), which evidence best supports an assessment of "symmetric encryption"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. Cryptographic configuration showing algorithm, mode, key size, and key-management process.
Practice →
4873
Module 20 · Foundation Domain 1 · Background symmetric encryption Unanswered

During a university cyber-range engagement (EDU-RANGE-M20-4873), which evidence best supports an assessment of "symmetric encryption"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A risk register linking assets to CIA impact ratings.
  3. Cryptographic configuration showing algorithm, mode, key size, and key-management process.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
4874
Module 20 · Applied Domain 1 · Background symmetric encryption Unanswered

During a financial-services purple-team test (FIN-PT-M20-4874), which evidence best supports an assessment of "symmetric encryption"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. Cryptographic configuration showing algorithm, mode, key size, and key-management process.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
4875
Module 20 · Applied Domain 1 · Background symmetric encryption Unanswered

During a cloud startup security audit (CLD-AUDIT-M20-4875), which evidence best supports an assessment of "symmetric encryption"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Cryptographic configuration showing algorithm, mode, key size, and key-management process.
  4. A risk register linking assets to CIA impact ratings.
Practice →
4876
Module 20 · Applied Domain 1 · Background symmetric encryption Unanswered

During a government risk-validation project (GOV-RISK-M20-4876), which evidence best supports an assessment of "symmetric encryption"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. Cryptographic configuration showing algorithm, mode, key size, and key-management process.
Practice →
4877
Module 20 · Applied Domain 1 · Background symmetric encryption Unanswered

During an e-commerce application review (ECOM-WEB-M20-4877), which evidence best supports an assessment of "symmetric encryption"?

View answer choices
  1. Cryptographic configuration showing algorithm, mode, key size, and key-management process.
  2. A risk register linking assets to CIA impact ratings.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
4878
Module 20 · Advanced Domain 1 · Background symmetric encryption Unanswered

During a manufacturing and OT security review (MFG-OT-M20-4878), which evidence best supports an assessment of "symmetric encryption"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Cryptographic configuration showing algorithm, mode, key size, and key-management process.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
4879
Module 20 · Advanced Domain 1 · Background symmetric encryption Unanswered

During a mobile-services penetration test (MOB-TEST-M20-4879), which evidence best supports an assessment of "symmetric encryption"?

View answer choices
  1. Cryptographic configuration showing algorithm, mode, key size, and key-management process.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A risk register linking assets to CIA impact ratings.
Practice →
4880
Module 20 · Advanced Domain 1 · Background symmetric encryption Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M20-4880), which evidence best supports an assessment of "symmetric encryption"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. Cryptographic configuration showing algorithm, mode, key size, and key-management process.
Practice →
4881
Module 20 · Foundation Domain 3 · Security encryption at rest Unanswered

During an authorized retail-company assessment (RET-LAB-M20-4881), which statement most accurately defines "encryption at rest"?

View answer choices
  1. Cryptographic protection for stored data on disks, databases, backups, or object storage.
  2. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  3. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  4. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
Practice →
4882
Module 20 · Foundation Domain 3 · Security encryption at rest Unanswered

During a hospital incident-response exercise (HLT-SOC-M20-4882), which statement most accurately defines "encryption at rest"?

View answer choices
  1. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  2. Cryptographic protection for stored data on disks, databases, backups, or object storage.
  3. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  4. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
Practice →
4883
Module 20 · Foundation Domain 3 · Security encryption at rest Unanswered

During a university cyber-range engagement (EDU-RANGE-M20-4883), which statement most accurately defines "encryption at rest"?

View answer choices
  1. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  2. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  3. Cryptographic protection for stored data on disks, databases, backups, or object storage.
  4. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
Practice →
4884
Module 20 · Applied Domain 3 · Security encryption at rest Unanswered

During a financial-services purple-team test (FIN-PT-M20-4884), which statement most accurately defines "encryption at rest"?

View answer choices
  1. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  2. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  3. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  4. Cryptographic protection for stored data on disks, databases, backups, or object storage.
Practice →
4885
Module 20 · Applied Domain 3 · Security encryption at rest Unanswered

During a cloud startup security audit (CLD-AUDIT-M20-4885), which statement most accurately defines "encryption at rest"?

View answer choices
  1. Cryptographic protection for stored data on disks, databases, backups, or object storage.
  2. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  3. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  4. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
Practice →
4886
Module 20 · Applied Domain 3 · Security encryption at rest Unanswered

During a government risk-validation project (GOV-RISK-M20-4886), which statement most accurately defines "encryption at rest"?

View answer choices
  1. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  2. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  3. Cryptographic protection for stored data on disks, databases, backups, or object storage.
  4. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
Practice →
4887
Module 20 · Applied Domain 3 · Security encryption at rest Unanswered

During an e-commerce application review (ECOM-WEB-M20-4887), which statement most accurately defines "encryption at rest"?

View answer choices
  1. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  2. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  3. Cryptographic protection for stored data on disks, databases, backups, or object storage.
  4. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
Practice →
4888
Module 20 · Advanced Domain 3 · Security encryption at rest Unanswered

During a manufacturing and OT security review (MFG-OT-M20-4888), which statement most accurately defines "encryption at rest"?

View answer choices
  1. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  2. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  3. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  4. Cryptographic protection for stored data on disks, databases, backups, or object storage.
Practice →
4889
Module 20 · Advanced Domain 3 · Security encryption at rest Unanswered

During a mobile-services penetration test (MOB-TEST-M20-4889), which statement most accurately defines "encryption at rest"?

View answer choices
  1. Cryptographic protection for stored data on disks, databases, backups, or object storage.
  2. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  3. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  4. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
Practice →
4890
Module 20 · Advanced Domain 3 · Security encryption at rest Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M20-4890), which statement most accurately defines "encryption at rest"?

View answer choices
  1. Cryptographic protection for stored data on disks, databases, backups, or object storage.
  2. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  3. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  4. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
Practice →
4891
Module 20 · Foundation Domain 3 · Security encryption at rest Unanswered

During an authorized retail-company assessment (RET-LAB-M20-4891), which risk is most directly associated with "encryption at rest"?

View answer choices
  1. Controls chosen without risk context may protect low-value assets while critical risks remain.
  2. Lost media or unauthorized storage access can expose plaintext data.
  3. Reliance on a single control creates a direct path when that control fails or is bypassed.
  4. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
Practice →
4892
Module 20 · Foundation Domain 3 · Security encryption at rest Unanswered

During a hospital incident-response exercise (HLT-SOC-M20-4892), which risk is most directly associated with "encryption at rest"?

View answer choices
  1. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  2. Reliance on a single control creates a direct path when that control fails or is bypassed.
  3. Lost media or unauthorized storage access can expose plaintext data.
  4. Controls chosen without risk context may protect low-value assets while critical risks remain.
Practice →
4893
Module 20 · Foundation Domain 3 · Security encryption at rest Unanswered

During a university cyber-range engagement (EDU-RANGE-M20-4893), which risk is most directly associated with "encryption at rest"?

View answer choices
  1. Reliance on a single control creates a direct path when that control fails or is bypassed.
  2. Controls chosen without risk context may protect low-value assets while critical risks remain.
  3. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  4. Lost media or unauthorized storage access can expose plaintext data.
Practice →
4894
Module 20 · Applied Domain 3 · Security encryption at rest Unanswered

During a financial-services purple-team test (FIN-PT-M20-4894), which risk is most directly associated with "encryption at rest"?

View answer choices
  1. Lost media or unauthorized storage access can expose plaintext data.
  2. Controls chosen without risk context may protect low-value assets while critical risks remain.
  3. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  4. Reliance on a single control creates a direct path when that control fails or is bypassed.
Practice →
4895
Module 20 · Applied Domain 3 · Security encryption at rest Unanswered

During a cloud startup security audit (CLD-AUDIT-M20-4895), which risk is most directly associated with "encryption at rest"?

View answer choices
  1. Reliance on a single control creates a direct path when that control fails or is bypassed.
  2. Lost media or unauthorized storage access can expose plaintext data.
  3. Controls chosen without risk context may protect low-value assets while critical risks remain.
  4. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
Practice →
4896
Module 20 · Applied Domain 3 · Security encryption at rest Unanswered

During a government risk-validation project (GOV-RISK-M20-4896), which risk is most directly associated with "encryption at rest"?

View answer choices
  1. Lost media or unauthorized storage access can expose plaintext data.
  2. Reliance on a single control creates a direct path when that control fails or is bypassed.
  3. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  4. Controls chosen without risk context may protect low-value assets while critical risks remain.
Practice →
4897
Module 20 · Applied Domain 3 · Security encryption at rest Unanswered

During an e-commerce application review (ECOM-WEB-M20-4897), which risk is most directly associated with "encryption at rest"?

View answer choices
  1. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  2. Controls chosen without risk context may protect low-value assets while critical risks remain.
  3. Reliance on a single control creates a direct path when that control fails or is bypassed.
  4. Lost media or unauthorized storage access can expose plaintext data.
Practice →
4898
Module 20 · Advanced Domain 3 · Security encryption at rest Unanswered

During a manufacturing and OT security review (MFG-OT-M20-4898), which risk is most directly associated with "encryption at rest"?

View answer choices
  1. Lost media or unauthorized storage access can expose plaintext data.
  2. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  3. Controls chosen without risk context may protect low-value assets while critical risks remain.
  4. Reliance on a single control creates a direct path when that control fails or is bypassed.
Practice →
4899
Module 20 · Advanced Domain 3 · Security encryption at rest Unanswered

During a mobile-services penetration test (MOB-TEST-M20-4899), which risk is most directly associated with "encryption at rest"?

View answer choices
  1. Controls chosen without risk context may protect low-value assets while critical risks remain.
  2. Lost media or unauthorized storage access can expose plaintext data.
  3. Reliance on a single control creates a direct path when that control fails or is bypassed.
  4. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
Practice →
4900
Module 20 · Advanced Domain 3 · Security encryption at rest Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M20-4900), which risk is most directly associated with "encryption at rest"?

View answer choices
  1. Lost media or unauthorized storage access can expose plaintext data.
  2. Reliance on a single control creates a direct path when that control fails or is bypassed.
  3. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  4. Controls chosen without risk context may protect low-value assets while critical risks remain.
Practice →