ECCouncil 212-82 Exam Questions and Answers, ECCouncil Certified Cybersecurity Technician

Question #1

You have been tasked with selecting a digital certificate standard for your company to use. Which one of the following is an international standard for the format and information contained in a digital certificate?

A. CA

B. CRL

C. RFC 2298

D. X

View answer

Correct Answer: D

Question #2

Ashton is working as a security specialist in SoftEight Tech. He was instructed by the management to strengthen the Internet access policy. For this purpose, he implemented a type of Internet access policy that forbids everything and imposes strict restrictions on all company computers, whether it is system or network usage. Identify the type of Internet access policy implemented by Ashton in the above scenario.

A. Paranoid policy

B. Prudent policy

C. Permissive policy

D. Promiscuous policy

View answer

Correct Answer: A

Question #3

Protocol suite provides a method of setting up a secure channel for protected data exchange between two devices.

A. CLR

B. OCSP

C. TLS

D. IPSec

View answer

Correct Answer: D

Question #4

How does Kerberos generate the first secret key in the authentication process?

A. By creating a hash of the user password

B. By generating a random AES key

C. By using the user's public key

D. By hashing the user ID, network ID, and salt

View answer

Correct Answer: A

Question #5

Which one of the following uses three different keys, all of the same size?

A. 3DES

B. AES

C. RSA

D. DES

View answer

Correct Answer: A

Question #6

Myles, a security professional at an organization, provided laptops for all the employees to carry out the business processes from remote locations. While installing necessary applications required for the business, Myles has also installed antivirus software on each laptop following the company's policy to detect and protect the machines from external malicious events over the Internet. Identify the PCI-DSS requirement followed by Myles in the above scenario.

A. PCI-DSS requirement no 1

B. PCI-DSS requirement no 1

C. PCI-DSS requirement no 5

D. PCI-DSS requirement no 1

View answer

Correct Answer: C

Question #7

Rhett, a security professional at an organization, was instructed to deploy an IDS solution on their corporate network to defend against evolving threats. For this purpose, Rhett selected an IDS solution that first creates models for possible intrusions and then compares these models with incoming events to make detection decisions. Identify the detection method employed by the IDS solution in the above scenario.

A. Not-use detection

B. Protocol anomaly detection

C. Anomaly detection

D. Signature recognition

View answer

Correct Answer: C

Question #8

Sam, a software engineer, visited an organization to give a demonstration on a software tool that helps in business development. The administrator at the organization created a least privileged account on a system and allocated that system to Sam for the demonstration. Using this account, Sam can only access the files that are required for the demonstration and cannot open any other file in the system. Which of the following type of accounts the organization has given to Sam in the above scenario?

A. Service account

B. Guest account

C. User account

D. Administrator account

View answer

Correct Answer: B

Question #9

Which of the following techniques is used (other than brute force) to attempt to derive a key?

A. Password cracking

B. Cryptography

C. Hacking

D. Cryptanalysis

View answer

Correct Answer: D

Question #10

Myles, a security professional at an organization, provided laptops for all the employees to carry out the business processes from remote locations. While installing necessary applications required for the business, Myles has also installed antivirus software on each laptop following the company's policy to detect and protect the machines from external malicious events over the Internet. Identify the PCI-DSS requirement followed by Myles in the above scenario.

A. PCI-DSS requirement no 1

B. PCI-DSS requirement no 1

C. PCI-DSS requirement no 5

D. PCI-DSS requirement no 1

View answer

Correct Answer: C

Question #11

The mode makes a block cipher into a synchronous stream cipher. It generates keystream blocks, which are then XORed with the plaintext blocks to get the ciphertext.

A. Electronic codebook (ECB)

B. Output feedback (OFB)

C. Cipher feedback (CFB)

D. Cipher block chaining (CBC)

View answer

Correct Answer: B

Question #12

Sam, a software engineer, visited an organization to give a demonstration on a software tool that helps in business development. The administrator at the organization created a least privileged account on a system and allocated that system to Sam for the demonstration. Using this account, Sam can only access the files that are required for the demonstration and cannot open any other file in the system. Which of the following type of accounts the organization has given to Sam in the above scenario?

A. Service account

B. Guest account

C. User account

D. Administrator account

View answer

Correct Answer: B

Question #13

Ferris has been assigned the task of selecting security for his company’s wireless network. It is important that he pick the strongest form of wireless security. Which one of the following is the strongest wireless security?

A. WEP

B. TKIP

C. WPA2

D. WPA

View answer

Correct Answer: C

Question #14

Zion belongs to a category of employees who are responsible for implementing and managing the physical security equipment installed around the facility. He was instructed by the management to check the functionality of equipment related to physical security. Identify the designation of Zion.

A. Supervisor

B. Chief information security officer

C. Guard

D. Safety officer

View answer

Correct Answer: C

Question #15

What is a variation of DES that uses a technique called Key Whitening?

A. AES

B. 3DES

C. DESX

D. Blowfish

View answer

Correct Answer: C

Question #16

Thomas, an employee of an organization, is restricted to access specific websites from his office system. He is trying to obtain admin credentials to remove the restrictions. While waiting for an opportunity, he sniffed communication between the administrator and an application server to retrieve the admin credentials. Identify the type of attack performed by Thomas in the above scenario.

A. Vishing

B. Eavesdropping

C. Phishing

D. Dumpster diving

View answer

Correct Answer: B

Question #17

In an organization, all the servers and database systems are guarded in a sealed room with a single entry point. The entrance is protected with a physical lock system that requires typing a sequence of numbers and letters by using a rotating dial that intermingles with several other rotating discs. Which of the following types of physical locks is used by the organization in the above scenario?

A. Digital locks

B. Combination locks

C. Mechanical locks

D. Electromagnetic locks

View answer

Correct Answer: B

Question #18

Which one of the following wireless standards uses the Advanced Encryption Standard (AES) using the Counter Mode-Cipher Block Chaining (CBC)-Message Authentication Code (MAC) Protocol (CCMP)?

A. WEP

B. WEP2

C. WPA

D. WPA2

View answer

Correct Answer: D

Question #19

You have been tasked with selecting a digital certificate standard for your company to use. Which one of the following is an international standard for the format and information contained in a digital certificate?

A. CA

B. CRL

C. RFC 2298

D. X

View answer

Correct Answer: D

Question #20

What is the basis for the difficulty in breaking RSA?

A. Factoring numbers

B. Hashing

C. Equations that describe an elliptic curve

D. The birthday paradox

View answer

Correct Answer: A

Question #21

Thomas, an employee of an organization, is restricted to access specific websites from his office system. He is trying to obtain admin credentials to remove the restrictions. While waiting for an opportunity, he sniffed communication between the administrator and an application server to retrieve the admin credentials. Identify the type of attack performed by Thomas in the above scenario.

A. Vishing

B. Eavesdropping

C. Phishing

D. Dumpster diving

View answer

Correct Answer: B

Question #22

Tom is explaining historical cryptography to a class of security students. Which of the following ciphers is a subset of the Vigenère cipher?

A. Scytale

B. Caesar

C. Blowfish

D. Atbash

View answer

Correct Answer: C

Question #23

Kayden successfully cracked the final round of interview at an organization. After few days, he received his offer letter through an official company email address. The email stated that the selected candidate should respond within a specified time. Kayden accepted the opportunity and provided e-signature on the offer letter, then replied to the same email address. The company validated the e-signature and added his details to their database. Here, Kayden could not deny company's message, and company could

A. Availability

B. Non-repudiation

C. Integrity

D. Confidentiality

View answer

Correct Answer: B

Question #24

Which of the following is a substitution cipher used by ancient Hebrew scholars?

A. Atbash

B. Vigenere

C. Caesar

D. Scytale

View answer

Correct Answer: A

Question #25

How does Kerberos generate the first secret key in the authentication process?

A. By creating a hash of the user password

B. By generating a random AES key

C. By using the user's public key

D. By hashing the user ID, network ID, and salt

View answer

Correct Answer: A

Question #26

While many companies are working on quantum computing, what is the current biggest challenge?

A. Processing speed

B. Decoherence

C. Funding

D. Power needs

View answer

Correct Answer: B

Question #27

A _______ product refers to an NSA-endorsed classified or controlled cryptographic item for classified or sensitive U. S. government information, including cryptographic equipment, assembly, or component classified or certified by NSA for encrypting and decrypting classified and sensitive national security information when appropriately keyed

A. Туре 1

B. Туре 4

C. Туре 2

D. Туре 3

View answer

Correct Answer: A

Question #28

What is the basis for the difficulty in breaking RSA?

A. Factoring numbers

B. Hashing

C. Equations that describe an elliptic curve

D. The birthday paradox

View answer

Correct Answer: A

Question #29

Lorenzo, a security professional in an MNC, was instructed to establish centralized authentication, authorization, and accounting for remote-access servers. For this purpose, he implemented a protocol that is based on the client-server model and works at the transport layer of the OSI model. Identify the remote authentication protocol employed by Lorenzo in the above scenario.

A. SNMPv3

B. RADIUS

C. POP3S

D. IMAPS

View answer

Correct Answer: B

Question #30

Kayden successfully cracked the final round of interview at an organization. After few days, he received his offer letter through an official company email address. The email stated that the selected candidate should respond within a specified time. Kayden accepted the opportunity and provided e-signature on the offer letter, then replied to the same email address. The company validated the e-signature and added his details to their database. Here, Kayden could not deny company's message, and company could

A. Availability

B. Non-repudiation

C. Integrity

D. Confidentiality

View answer

Correct Answer: B

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now

ECCouncil 212-82 Exam Questions and Answers, ECCouncil Certified Cybersecurity Technician | SPOTO

View Answers after Submission

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE Get Now

ECCouncil 212-82 Exam Questions and Answers, ECCouncil Certified Cybersecurity Technician | SPOTO

View Answers after Submission

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now