Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. EC-Council
  5. 212-81

EC-Council 212-81 Exam Questions
Certified Encryption Specialist (Page 4 )

Updated On: 24-Feb-2026
Page 4 of 43
PDF with 206 Questions

The greatest weakness with symmetric algorithms is _____.

  1. They are less secure than asymmetric
  2. The problem of key exchange
  3. The problem of generating keys
  4. They are slower than asymmetric

Answer(s): B

Explanation:

The problem of key exchange https://en.wikipedia.org/wiki/Symmetric-key_algorithm
Symmetric-key algorithms are algorithms for cryptography that use the same cryptographic keys for both encryption of plaintext and decryption of ciphertext. The keys may be identical or there may be a simple transformation to go between the two keys. The keys, in practice, represent a shared secret between two or more parties that can be used to maintain a private information link. This requirement that both parties have access to the secret key is one of the main drawbacks of symmetric key encryption, in comparison to public-key encryption (also known as asymmetric key encryption).



In IPSec, if the VPN is a gateway-gateway or a host-gateway, then which one of the following is true?

  1. IPSec does not involve gateways
  2. Only transport mode can be used
  3. Encapsulating Security Payload (ESP) authentication must be used
  4. Only the tunnel mode can be used

Answer(s): D

Explanation:

IPSec has two different modes: transport mode and tunnel mode.
Only the tunnel mode can be used https://en.wikipedia.org/wiki/IPsec
In tunnel mode, the entire IP packet is encrypted and authenticated. It is then encapsulated into a new IP packet with a new IP header. Tunnel mode is used to create virtual private networks for network-to-network communications (e.g. between routers to link sites), host-to-network communications (e.g. remote user access) and host-to-host communications (e.g. private chat).

Incorrect answers:
Encapsulating Security Payload (ESP) authentication must be used. ESP in transport mode does not provide integrity and authentication for the entire IP packet. However, in Tunnel Mode, where the entire original IP packet is encapsulated with a new packet header added, ESP protection is afforded to the whole inner IP packet (including the inner header) while the outer header (including any outer IPv4 options or IPv6 extension headers) remains unprotected.
IPSec does not involve gateways. Wrong.
Only transport mode can be used. Transport mode, the default mode for IPSec, provides for end-to-

end security. It can secure communications between a client and a server.
When using the transport mode, only the IP payload is encrypted.



What is the formula m^e %n related to?

  1. Encrypting with EC
  2. Decrypting with RSA
  3. Generating Mersenne primes
  4. Encrypting with RSA

Answer(s): D

Explanation:

Encrypting with RSA
https://en.wikipedia.org/wiki/RSA_(cryptosystem)
RSA Encrypting a message m (number) with the public key (n, e) is calculated:
M' := m^e %n
Incorrect answers:
Decrypting with RSA:
M'' := m^d %n
Generation Mersenne primes:
Mn = 2^n - 1
Encrypting with Elliptic Curve (EC):
y^2 = x^3 + ax + b



A real time protocol for verifying certificates (and a newer method than CRL).

  1. Online Certificate Status Protocol (OCSP)
  2. Server-based Certificate Validation Protocol (SCVP)
  3. Public Key Infrastructure (PKI)
  4. Registration Authority (RA)

Answer(s): A

Explanation:

Online Certificate Status Protocol (OCSP)
https://en.wikipedia.org/wiki/Online_Certificate_Status_Protocol The Online Certificate Status Protocol (OCSP) is an Internet protocol used for obtaining the revocation status of an X.509 digital certificate. It is described in RFC 6960 and is on the Internet standards track. It was created as an alternative to certificate revocation lists (CRL), specifically addressing certain problems associated with using CRLs in a public key infrastructure (PKI).
Incorrect answers:
Public Key Infrastructure (PKI) - set of roles, policies, hardware, software and procedures needed to create, manage, distribute, use, store and revoke digital certificates and manage public-key encryption. The purpose of a PKI is to facilitate the secure electronic transfer of information for a range of network activities such as e-commerce, internet banking and confidential email. It is required for activities where simple passwords are an inadequate authentication method and more rigorous proof is required to confirm the identity of the parties involved in the communication and to validate the information being transferred.
Registration Authority (RA) - omponent of PKI that validates the identity of an entity requesting a digital certificate.
Server-based Certificate Validation Protocol (SCVP) - Internet protocol for determining the path between an X.509 digital certificate and a trusted root (Delegated Path Discovery) and the validation of that path (Delegated Path Validation) according to a particular validation policy.



Which of the following is not a key size used by AES?

  1. 128 bits
  2. 192 bits
  3. 256 bits
  4. 512 b

Answer(s): D

Explanation:

512 bits https://en.wikipedia.org/wiki/Advanced_Encryption_Standard AES is a subset of the Rijndael block cipher developed by two Belgian cryptographers, Vincent Rijmen and Joan Daemen, who submitted a proposal to NIST during the AES selection process. Rijndael is a family of ciphers with different key and block sizes. For AES, NIST selected three members of the Rijndael family, each with a block size of 128 bits, but three different key lengths: 128, 192 and 256 bits.






Post your Comments and Discuss EC-Council 212-81 exam dumps with other Community members:

Join the 212-81 Discussion