CEH Practice Question: Advanced Topics: Wireless, Cloud, IoT, Cryptography
Which of the following is a symmetric encryption algorithm that uses a block cipher with a fixed block size of 128 bits and key sizes of 128, 192, or 256 bits?
⚠ Common exam trap
Many candidates confuse AES with 3DES due to both being symmetric block ciphers, but they fail to recall that 3DES uses a 64-bit block size (not 128 bits) and lacks the specific key size options of AES, leading them to select 3DES incorrectly.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AES
AES (Advanced Encryption Standard) is a symmetric encryption algorithm that operates as a block cipher with a fixed block size of 128 bits and supports key sizes of 128, 192, or 256 bits. It was established by NIST in 2001 (FIPS 197) and is widely used in modern cryptographic systems, including wireless security (WPA2/WPA3) and TLS.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
3DES
Why it's wrong here
3DES (Triple DES) is a symmetric block cipher, but it operates with a fundamental block size of 64 bits, inherited directly from its predecessor, DES. While it enhances security by applying the DES algorithm three times with two or three distinct keys, it does not process data in 128-bit blocks. Therefore, it fails to meet the implied criteria of a 128-bit block size.
- ✗
RC4
Why it's wrong here
RC4 is a symmetric encryption algorithm, but it is fundamentally a stream cipher, not a block cipher. Stream ciphers encrypt data one byte or bit at a time by generating a pseudorandom keystream that is XORed with the plaintext. Consequently, RC4 does not have a defined block size, let alone a 128-bit one, making it unsuitable for any requirement specifying a fixed block size.
- ✓
AES
Why this is correct
AES (Advanced Encryption Standard) is the correct answer because it is a symmetric block cipher that processes data in fixed-size blocks of 128 bits. It supports robust key lengths of 128, 192, or 256 bits, providing strong cryptographic security. Its design, based on the Rijndael cipher, makes it highly efficient and widely adopted for various secure communication and storage applications.
- ✗
RSA
Why it's wrong here
RSA is an asymmetric encryption algorithm, which fundamentally distinguishes it from symmetric algorithms. Asymmetric encryption uses a pair of mathematically linked keys—a public key for encryption and a private key for decryption—rather than a single shared secret key. Therefore, RSA does not fit the "symmetric encryption algorithm" requirement of the question, regardless of any block size considerations.
Quick reference
Symmetric Encryption Algorithm Comparison
| Algorithm | Key Size | Block Size | Status | Notes |
|---|---|---|---|---|
| AES-128 | 128-bit | 128-bit | Current standard | NIST approved; WPA3, TLS |
| AES-256 | 256-bit | 128-bit | Current standard | Preferred for sensitive / govt data |
| 3DES | 112-bit effective | 64-bit | Deprecated (2023) | Replaced by AES |
| DES | 56-bit | 64-bit | Broken | Cracked in < 24 h; never deploy |
| ChaCha20 | 256-bit | Stream cipher | Current | TLS 1.3, WireGuard |
Go deeper
Related to this question
About these practice questions
Courseiva writes every CEH question from scratch — 870 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.