Courseiva

CEH Practice Question: Advanced Topics: Wireless, Cloud, IoT, Cryptography

Which of the following is a symmetric encryption algorithm that uses a block cipher with a fixed block size of 128 bits and key sizes of 128, 192, or 256 bits?

⚠ Common exam trap

Many candidates confuse AES with 3DES due to both being symmetric block ciphers, but they fail to recall that 3DES uses a 64-bit block size (not 128 bits) and lacks the specific key size options of AES, leading them to select 3DES incorrectly.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

AES

AES (Advanced Encryption Standard) is a symmetric encryption algorithm that operates as a block cipher with a fixed block size of 128 bits and supports key sizes of 128, 192, or 256 bits. It was established by NIST in 2001 (FIPS 197) and is widely used in modern cryptographic systems, including wireless security (WPA2/WPA3) and TLS.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • 3DES

    Why it's wrong here

    3DES (Triple DES) is a symmetric block cipher, but it operates with a fundamental block size of 64 bits, inherited directly from its predecessor, DES. While it enhances security by applying the DES algorithm three times with two or three distinct keys, it does not process data in 128-bit blocks. Therefore, it fails to meet the implied criteria of a 128-bit block size.

  • RC4

    Why it's wrong here

    RC4 is a symmetric encryption algorithm, but it is fundamentally a stream cipher, not a block cipher. Stream ciphers encrypt data one byte or bit at a time by generating a pseudorandom keystream that is XORed with the plaintext. Consequently, RC4 does not have a defined block size, let alone a 128-bit one, making it unsuitable for any requirement specifying a fixed block size.

  • AES

    Why this is correct

    AES (Advanced Encryption Standard) is the correct answer because it is a symmetric block cipher that processes data in fixed-size blocks of 128 bits. It supports robust key lengths of 128, 192, or 256 bits, providing strong cryptographic security. Its design, based on the Rijndael cipher, makes it highly efficient and widely adopted for various secure communication and storage applications.

  • RSA

    Why it's wrong here

    RSA is an asymmetric encryption algorithm, which fundamentally distinguishes it from symmetric algorithms. Asymmetric encryption uses a pair of mathematically linked keys—a public key for encryption and a private key for decryption—rather than a single shared secret key. Therefore, RSA does not fit the "symmetric encryption algorithm" requirement of the question, regardless of any block size considerations.

Quick reference

Symmetric Encryption Algorithm Comparison

AlgorithmKey SizeBlock SizeStatusNotes
AES-128128-bit128-bitCurrent standardNIST approved; WPA3, TLS
AES-256256-bit128-bitCurrent standardPreferred for sensitive / govt data
3DES112-bit effective64-bitDeprecated (2023)Replaced by AES
DES56-bit64-bitBrokenCracked in < 24 h; never deploy
ChaCha20256-bitStream cipherCurrentTLS 1.3, WireGuard

About these practice questions

Courseiva writes every CEH question from scratch — 870 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.