212-81 Exam Questions and Answers | Exam-Dumps (Page: 3)

QUESTION: 11

The greatest weakness with symmetric algorithms is ____________.

They are less secure than asymmetric
The problem of key exchange
The problem of generating keys
They are slower than asymmetric

Answer(s): B

Explanation:

The problem of key exchange https://en.wikipedia.org/wiki/Symmetric-key_algorithm
Symmetric-key algorithms are algorithms for cryptography that use the same cryptographic keys for both encryption of plaintext and decryption of ciphertext. The keys may be identical or there may be a simple transformation to go between the two keys. The keys, in practice, represent a shared secret between two or more parties that can be used to maintain a private information link. This requirement that both parties have access to the secret key is one of the main drawbacks of symmetric key encryption, in comparison to public-key encryption (also known as asymmetric key encryption).

Reveal Solution Next Question

QUESTION: 12

In IPSec, if the VPN is a gateway-gateway or a host-gateway, then which one of the following is true?

IPSec does not involve gateways
Only transport mode can be used
Encapsulating Security Payload (ESP) authentication must be used
Only the tunnel mode can be used

Answer(s): D

Explanation:

IPSec has two different modes: transport mode and tunnel mode. Only the tunnel mode can be used https://en.wikipedia.org/wiki/IPsec
In tunnel mode, the entire IP packet is encrypted and authenticated. It is then encapsulated into a new IP packet with a new IP header. Tunnel mode is used to create virtual private networks for network-to-network communications (e.g. between routers to link sites), host-to-network communications (e.g. remote user access) and host-to-host communications (e.g. private chat).

Incorrect answers:
Encapsulating Security Payload (ESP) authentication must be used. ESP in transport mode does not provide integrity and authentication for the entire IP packet. However, in Tunnel Mode, where the entire original IP packet is encapsulated with a new packet header added, ESP protection is afforded to the whole inner IP packet (including the inner header) while the outer header (including any outer IPv4 options or IPv6 extension headers) remains unprotected.
IPSec does not involve gateways. Wrong.
Only transport mode can be used. Transport mode, the default mode for IPSec, provides for end-to- end security. It can secure communications between a client and a server. When using the transport mode, only the IP payload is encrypted.

Reveal Solution Next Question

QUESTION: 13

What is the formula m^e %n related to?

Encrypting with EC
Decrypting with RSA
Generating Mersenne primes
Encrypting with RSA

Answer(s): D

Explanation:

Encrypting with RSA https://en.wikipedia.org/wiki/RSA_(cryptosystem)
RSA Encrypting a message m (number) with the public key (n, e) is calculated:
M' := m^e %n
Incorrect answers:
Decrypting with RSA:
M'' := m^d %n
Generation Mersenne primes:
Mn = 2^n - 1
Encrypting with Elliptic Curve (EC):
y^2 = x^3 + ax + b

Reveal Solution Next Question

QUESTION: 14

A real time protocol for verifying certificates (and a newer method than CRL).

Online Certificate Status Protocol (OCSP)
Server-based Certificate Validation Protocol (SCVP)
Public Key Infrastructure (PKI)
Registration Authority (RA)

Answer(s): A

Explanation:

Online Certificate Status Protocol (OCSP) https://en.wikipedia.org/wiki/Online_Certificate_Status_Protocol
The Online Certificate Status Protocol (OCSP) is an Internet protocol used for obtaining the revocation status of an X.509 digital certificate. It is described in RFC 6960 and is on the Internet standards track. It was created as an alternative to certificate revocation lists (CRL), specifically addressing certain problems associated with using CRLs in a public key infrastructure (PKI).

Incorrect answers:
Public Key Infrastructure (PKI) - set of roles, policies, hardware, software and procedures needed to create, manage, distribute, use, store and revoke digital certificates and manage public-key encryption. The purpose of a PKI is to facilitate the secure electronic transfer of information for a range of network activities such as e-commerce, internet banking and confidential email. It is required for activities where simple passwords are an inadequate authentication method and more rigorous proof is required to confirm the identity of the parties involved in the communication and to validate the information being transferred.
Registration Authority (RA) - сomponent of PKI that validates the identity of an entity requesting a digital certificate.
Server-based Certificate Validation Protocol (SCVP) - Internet protocol for determining the path between an X.509 digital certificate and a trusted root (Delegated Path Discovery) and the validation of that path (Delegated Path Validation) according to a particular validation policy.

Reveal Solution Next Question

QUESTION: 15

Which of the following is not a key size used by AES?

128 bits
192 bits
256 bits
512 b

Answer(s): D

Explanation:

512 bits
https://en.wikipedia.org/wiki/Advanced_Encryption_Standard
AES is a subset of the Rijndael block cipher developed by two Belgian cryptographers, Vincent Rijmen and Joan Daemen, who submitted a proposal to NIST during the AES selection process. Rijndael is a family of ciphers with different key and block sizes. For AES, NIST selected three members of the Rijndael family, each with a block size of 128 bits, but three different key lengths: 128, 192 and 256 bits.

Reveal Solution Next Question

EC-Council 212-81 Exam (page: 3) EC-Council Certified Encryption Specialist Updated on: 12-Feb-2026

QUESTION: 11

Explanation:

QUESTION: 12

Explanation:

QUESTION: 13

Explanation:

QUESTION: 14

Explanation:

QUESTION: 15

Explanation:

EC-Council 212-81 Exam (page: 3)
EC-Council Certified Encryption Specialist
Updated on: 12-Feb-2026