Eccouncil 212-82 Exam Dumps

Eccouncil 212-82 Sample Question Answers

Question # 1

You have been assigned to perform a vulnerability assessment of a web server located at IP address 20.20.10.26. Identify the vulnerability with a severity score of & A.  You can use the OpenVAS vulnerability scanner, available with the Parrot Security machine, withcredentials admin/password for this challenge. (Practical Question) 

A. TCP limestamps 
B. FTP Unencrypted Cleartext Login 
C. Anonymous FTP Login Reporting 
D. UDP limestamps

Show Answer

Question # 2

A disgruntled employee has set up a RAT (Remote Access Trojan) server in one of the machines in the target network to steal sensitive corporate documents. The IP address of the target machine where the RAT is installed is 20.20.10.26. Initiate a remote connection to the target machine from the "Attacker Machine-1" using the Theef client. Locate the "Sensitive Corporate Documents" folder in the target machine's Documents directory and determine the number of files. Mint: Theef folder is located at Z:\CCT-Tools\CCT Module 01 Information Security Threats and Vulnerabilities\Remote Access Trojans (RAT)\Theef of the Attacker Machine1. 

A. 2 
B. 4 
C. 5 
D. 3 

Show Answer

Question # 3

The SOC department in a multinational organization has collected logs of a security event as "Windows.events.evtx". Study the Audit Failure logs in the event log file located in the Documents folder of the -Attacker Maehine-1" and determine the IP address of the attacker. (Note: The event ID of Audit failure logs is 4625.) (Practical Question)

A. 10.10.1.12 
B. 10.10.1.10 
C. 10.10.1.16 
D. 10.10.1.19 

Show Answer

Question # 4

An organization's risk management team identified the risk of natural disasters in the organization's current location. Because natural disasters cannot be prevented using security controls, the team suggested to build a new office in another location to eliminate the identified risk. Identify the risk treatment option suggested by the risk management team in this scenario.

A. Risk modification 
B. Risk avoidance 
C. Risk sharing 
D. Risk retention 

Show Answer

Question # 5

Jase. a security team member at an organization, was tasked with ensuring uninterrupted business operations under hazardous conditions. Thus, Jase implemented a deterrent control strategy to minimize the occurrence of threats, protect critical business areas, and mitigate the impact of threats. Which of the following business continuity and disaster recovery activities did Jase perform in this scenario? 

A. Prevention 
B. Response 
C. Restoration 
D. Recovery

Show Answer

Question # 6

Kaison. a forensic officer, was investigating a compromised system used for various online attacks. Kaison initiated the data acquisition process and extracted the data from the systems DVD-ROM. Which of the following types of data did Kaison acquire in the above scenario? 

A. Archival media 
B. Kernel statistics 
C. ARP cache 
D. Processor cache

Show Answer

Question # 7

Dany, a member of a forensic team, was actively involved in an online crime investigation process. Dany's main responsibilities included providing legal advice on conducting the investigation and addressing legal issues involved in the forensic investigation process. Identify the role played by Dany in the above scenario.

A. Attorney 
B. Incident analyzer 
C. Expert witness 
D. Incident responder

Show Answer

Question # 8

Desmond, a forensic officer, was investigating a compromised machine involved in various online attacks. For this purpose. Desmond employed a forensic tool to extract and analyze computer-based evidence to retrieve information related to websites accessed from the victim machine. Identify the computer-created evidence retrieved by Desmond in this scenario. 

A. Cookies 
B. Documents 
C. Address books 
D. Compressed files 

Show Answer

Question # 9

Cairo, an incident responder. was handling an incident observed in an organizational network. After performing all IH&R steps, Cairo initiated post-incident activities. He determined all types of losses caused by the incident by identifying And evaluating all affected devices, networks, applications, and software. Identify the post-incident activity performed by Cairo in this scenario.

A. Incident impact assessment 
B. Close the investigation 
C. Review and revise policies 
D. Incident disclosure 

Show Answer

Question # 10

The incident handling and response (IH&R) team of an organization was handling a recent cyberattack on the organization's web server. Fernando, a member of the IH&P team, was tasked with eliminating the root cause of the incident and closing all attack vectors to prevent similar incidents in future. For this purpose. Fernando applied the latest patches to the web server and installed the latest security mechanisms on it. Identify the IH&R step performed by Fernando in this scenario. 

A. Notification 
B. Containment 
C. Recovery 
D. Eradication

Show Answer

Question # 11

Identify a machine in the network with 5SH service enabled. Initiate an SSH Connection to the machine, find the file, ttag.txt. in the machine, and enter the tile's content as the answer. The credentials tor SSH login are sam/adm(admin@123. {Practical Question) 

A. sam@bob 
B. bob2@sam 
C. sam2@bob 
D. bobt@sam 

Show Answer

Question # 12

Gideon, a forensic officer, was examining a victim's Linux system suspected to be involved in online criminal activities. Gideon navigated to a directory containing a log file that recorded information related to user login/logout. This information helped Gideon to determine the current login state of cyber criminals in the victim system, identify the Linux log file accessed by Gideon in this scenario. 

A. /va r/l og /mysq Id. log 
B. /va r/l og /wt m p 
C. /ar/log/boot.iog 
D. /var/log/httpd/

Show Answer

Question # 13

Brielle. a security professional, was instructed to secure her organization's network from malicious activities. To achieve this, she started monitoring network activities on a control system that collected event data from various sources. During this process. Brielle observed that a malicious actor had logged in to access a network device connected to the organizational network. Which of the following types of events did Brielle identify in the above scenario?

A. Failure audit 
B. Error 
C. Success audit 
D. Warning 

Show Answer

Question # 14

Zayn, a network specialist at an organization, used Wireshark to perform network analysis. He selected a Wireshark menu that provided a summary ol captured packets, IO graphs, and flow graphs. Identify the Wireshark menu selected by Zayn in this scenario. 

A. Status bar 
B. Analyze 
C. Statistics 
D. Packet list panel 

Show Answer

Question # 15

Finley, a security professional at an organization, was tasked with monitoring the organizational network behavior through the SIEM dashboard. While monitoring, Finley noticed suspicious activities in the network; thus, he captured and analyzed a single network packet to determine whether the signature included malicious patterns. Identify the attack signature analysis technique employed by Finley in this scenario. 

A. Context-based signature analysis 
B. Atomic-signature-based analysis 
C. Composite signature-based analysis 
D. Content-based signature analysis

Show Answer

Question # 16

Jordan, a network administrator in an organization, was instructed to identify network-related issues and improve network performance. While troubleshooting the network, he received a message indicating that the datagram could not be forwarded owing to the unavailability of IP-related services(such as FTP or web services) on the target host, which of the following network issues did Jordan find in this scenario? 

A. Time exceeded message 
B. Destination unreachable message 
C. Unreachable networks 
D. Network cable is unplugged 

Show Answer