Eccouncil 212-82 Practice Exam Questions

Eccouncil 212-82 Sample Question Answers

Question # 1

You have been assigned to perform a vulnerability assessment of a web server located at IP address 20.20.10.26. Identify the vulnerability with a severity score of & A.  You can use the OpenVAS vulnerability scanner, available with the Parrot Security machine, withcredentials admin/password for this challenge. (Practical Question) 

A. TCP limestamps 
B. FTP Unencrypted Cleartext Login 
C. Anonymous FTP Login Reporting 
D. UDP limestamps

Show Answer

Question # 2

A disgruntled employee has set up a RAT (Remote Access Trojan) server in one of the machines in the target network to steal sensitive corporate documents. The IP address of the target machine where the RAT is installed is 20.20.10.26. Initiate a remote connection to the target machine from the "Attacker Machine-1" using the Theef client. Locate the "Sensitive Corporate Documents" folder in the target machine's Documents directory and determine the number of files. Mint: Theef folder is located at Z:\CCT-Tools\CCT Module 01 Information Security Threats and Vulnerabilities\Remote Access Trojans (RAT)\Theef of the Attacker Machine1. 

A. 2 
B. 4 
C. 5 
D. 3 

Show Answer

Question # 3

The SOC department in a multinational organization has collected logs of a security event as "Windows.events.evtx". Study the Audit Failure logs in the event log file located in the Documents folder of the -Attacker Maehine-1" and determine the IP address of the attacker. (Note: The event ID of Audit failure logs is 4625.) (Practical Question)

A. 10.10.1.12 
B. 10.10.1.10 
C. 10.10.1.16 
D. 10.10.1.19 

Show Answer

Question # 4

An organization's risk management team identified the risk of natural disasters in the organization's current location. Because natural disasters cannot be prevented using security controls, the team suggested to build a new office in another location to eliminate the identified risk. Identify the risk treatment option suggested by the risk management team in this scenario.

A. Risk modification 
B. Risk avoidance 
C. Risk sharing 
D. Risk retention 

Show Answer

Question # 5

Jase. a security team member at an organization, was tasked with ensuring uninterrupted business operations under hazardous conditions. Thus, Jase implemented a deterrent control strategy to minimize the occurrence of threats, protect critical business areas, and mitigate the impact of threats. Which of the following business continuity and disaster recovery activities did Jase perform in this scenario? 

A. Prevention 
B. Response 
C. Restoration 
D. Recovery

Show Answer

Question # 6

Kaison. a forensic officer, was investigating a compromised system used for various online attacks. Kaison initiated the data acquisition process and extracted the data from the systems DVD-ROM. Which of the following types of data did Kaison acquire in the above scenario? 

A. Archival media 
B. Kernel statistics 
C. ARP cache 
D. Processor cache

Show Answer

Question # 7

Dany, a member of a forensic team, was actively involved in an online crime investigation process. Dany's main responsibilities included providing legal advice on conducting the investigation and addressing legal issues involved in the forensic investigation process. Identify the role played by Dany in the above scenario.

A. Attorney 
B. Incident analyzer 
C. Expert witness 
D. Incident responder

Show Answer

Question # 8

Desmond, a forensic officer, was investigating a compromised machine involved in various online attacks. For this purpose. Desmond employed a forensic tool to extract and analyze computer-based evidence to retrieve information related to websites accessed from the victim machine. Identify the computer-created evidence retrieved by Desmond in this scenario. 

A. Cookies 
B. Documents 
C. Address books 
D. Compressed files 

Show Answer

Question # 9

Cairo, an incident responder. was handling an incident observed in an organizational network. After performing all IH&R steps, Cairo initiated post-incident activities. He determined all types of losses caused by the incident by identifying And evaluating all affected devices, networks, applications, and software. Identify the post-incident activity performed by Cairo in this scenario.

A. Incident impact assessment 
B. Close the investigation 
C. Review and revise policies 
D. Incident disclosure 

Show Answer

Question # 10

The incident handling and response (IH&R) team of an organization was handling a recent cyberattack on the organization's web server. Fernando, a member of the IH&P team, was tasked with eliminating the root cause of the incident and closing all attack vectors to prevent similar incidents in future. For this purpose. Fernando applied the latest patches to the web server and installed the latest security mechanisms on it. Identify the IH&R step performed by Fernando in this scenario. 

A. Notification 
B. Containment 
C. Recovery 
D. Eradication

Show Answer