Free Practice Questions for Eccouncil 212-82 Exam

Andre, a security professional, was tasked with segregating the employees' names, phone numbers, and credit card numbers before sharing the database with clients. For this purpose, he implemented a deidentification technique that can replace the critical information in database fields with special characters such as asterisks (*) and hashes (#).Which of the following techniques was employed by Andre in the above scenario?

• Tokenization
• Masking
• Hashing
• Bucketing

Thomas, an employee of an organization, is restricted to access specific websites from his office system. He is trying to obtain admin credentials to remove the restrictions. While waiting for an opportunity, he sniffed communication between the administrator and an application server to retrieve the admin credentials. Identify the type of attack performed by Thomas in the above scenario.

• Vishing
• Eavesdropping
• Phishing
• Dumpster diving

Richards, a security specialist at an organization, was monitoring an IDS system. While monitoring, he suddenly received an alert of an ongoing intrusion attempt on the organization's network. He immediately averted the malicious actions by implementing the necessary measures.Identify the type of alert generated by the IDS system in the above scenario.

• True positive
• True negative
• False negative
• False positive

Miguel, a professional hacker, targeted an organization to gain illegitimate access to its critical information. He identified a flaw in the end-point communication that can disclose the target application's data.Which of the following secure application design principles was not met by the application in the above scenario?

• Secure the weakest link
• Do not trust user input
• Exception handling
• Fault tolerance

An FTP server has been hosted in one of the machines in the network. Using Cain and Abel the attacker was able to poison the machine and fetch the FTP credentials used by the admin. You're given a task to validate the credentials that were stolen using Cain and Abel and read the file flag.txt

• white@hat
• red@hat
• hat@red
• blue@hat

RAT has been setup in one of the machines connected to the network to steal the important Sensitive corporate docs located on Desktop of the server, further investigation revealed the IP address of the server 20.20.10.26. Initiate a remote connection using thief client and determine the number of files present in the folder.Hint: Thief folder is located at: Z:\CCT-Tools\CCT Module 01 Information Security Threats and Vulnerabilities\Remote Access Trojans (RAT)\Thief of Attacker Machine-1.

• 2
• 4
• 3
• 5

Stephen, a security professional at an organization, was instructed to implement security measures that prevent corporate data leakage on employees' mobile devices. For this purpose, he employed a technique using which all personal and corporate data are isolated on an employee's mobile device. Using this technique, corporate applications do not have any control of or communication with the private applications or data of the employees.Which of the following techniques has Stephen implemented in the above scenario?

• Full device encryption
• Geofencing
• Containerization
• OTA updates

Sam, a software engineer, visited an organization to give a demonstration on a software tool that helps in business development. The administrator at the organization created a least privileged account on a system and allocated that system to Sam for the demonstration. Using this account, Sam can only access the files that are required for the demonstration and cannot open any other file in the system.Which of the following type of accounts the organization has given to Sam in the above scenario?

• Service account
• Guest account
• User account
• Administrator account

Cassius, a security professional, works for the risk management team in an organization. The team is responsible for performing various activities involved in the risk management process. In this process, Cassius was instructed to select and implement appropriate controls on the identified risks in order to address the risks based on their severity level.Which of the following risk management phases was Cassius instructed to perform in the above scenario?

• Risk analysis
• Risk treatment
• Risk prioritization
• Risk identification

Hayes, a security professional, was tasked with the implementation of security controls for an industrial network at the Purdue level 3.5 (IDMZ). Hayes verified all the possible attack vectors on the IDMZ level and deployed a security control that fortifies the IDMZ against cyber-attacks.Identify the security control implemented by Hayes in the above scenario.

• Point-to-point communication
• MAC authentication
• Anti-DoS solution
• Use of authorized RTU and PLC commands