EC-Council CCT (212-82) Certification Sample Questions
The purpose of this Sample Question Set is to provide you with information about the EC-Council Certified Cybersecurity Technician exam. These sample questions will make you very familiar with both the type and the difficulty level of the questions on the 212-82 certification test. To get familiar with real exam environment, we suggest you try our Sample EC-Council CCT Certification Practice Exam. This sample practice exam gives you the feeling of reality and is a clue to the questions asked in the actual EC-Council Certified Cybersecurity Technician (CCT) certification exam.
These sample questions are simple and basic questions that represent likeness to the real EC-Council 212-82 exam questions. To assess your readiness and performance with real time scenario based questions, we suggest you prepare with our Premium EC-Council CCT Certification Practice Exam. When you solve real time scenario based questions practically, you come across many difficulties that give you an opportunity to improve.
EC-Council 212-82 Sample Questions:
01. Harris, a technician at a web development company, reviews a vulnerability scan of the Linux web server at 20.20.10.26. One high-severity finding reports a remote code execution flaw in an FTP server package. Harris checks the server and confirms that no FTP software is installed and nothing is listening on the FTP ports.
How should Harris classify this finding in the above scenario?
a) A true positive that must be patched before the next scheduled scan
b) A false negative, caused by the scanner missing the FTP service
c) A false positive, confirmed by manual validation
d) An accepted risk, to be recorded in the risk register with an owner
02. Richard, a professional hacker, was hired by a marketer to gather sensitive data about users' offline activities from location data. Richard employed a technique that uses GPS features to determine how close a user's mobile device is to an exact location. Using this technique, Richard placed a virtual barrier at a static location to interact with mobile users crossing the barrier.
Identify the technique employed by Richard in this scenario.
a) Geofencing
b) Over-the-air (OTA) updates
c) Full device encryption
d) Containerization
03. A government agency's confidential information is leaked to the public, causing significant embarrassment and damage to its reputation. The leaked data includes sensitive documents related to military operations and diplomatic communications.
Considering the scenario, which threat actor group is typically employed by governments to penetrate and gather top-secret information from other government or military organizations?
a) Criminal syndicates
b) State-sponsored hackers
c) Industrial spies
d) Script kiddies
04. Camden, a network specialist in an organization, monitored the behavior of the organizational network using a SIEM from a control room. The SIEM detected suspicious activity and sent an alert to the screen. Based on the severity of the incident displayed on the screen, Camden made the correct decision and immediately launched defensive actions to prevent further exploitation by attackers.
Which of the following SIEM functions allowed Camden to view suspicious behavior and make correct decisions during a security incident?
a) Application log monitoring
b) Log Retention
c) Data aggregation
d) Dashboard
05. What feature of advanced network traffic monitoring tools can distinguish between different types of traffic, such as data from emails versus web browsing?
a) Traffic classification
b) Basic logging
c) Color-coded graphs
d) URL filtering
06. CyberX, an acclaimed cybersecurity firm with a diverse clientele ranging from financial institutions to healthcare providers, has been approached by NexusCorp. NexusCorp, a global supply chain giant, seeks assistance in drafting a new security policy after a series of cyberattacks highlighted vulnerabilities in its existing protocols. While NexusCorp uses state-of-the-art technology, its security policies have not kept pace. It needs a policy that acknowledges its complex organizational structure, vast geographic spread and diversity in employee tech proficiency.
Which should be CyberX's primary consideration in this scenario?
a) Regular update schedules for software and hardware components.
b) Emphasis on stringent password policies.
c) Use of the latest encryption algorithms.
d) Stakeholder involvement in policy formulation.
07. NexaBank, a prestigious banking institution, houses its primary data center in Houston, Texas. The data center is essential because it holds sensitive customer information and processes millions of transactions daily.
The bank, while confident about its cybersecurity measures, is concerned about physical threats given Houston's susceptibility to natural disasters, especially hurricanes. Management understands that a natural disaster could disrupt services or, worse, compromise customer data. The bank is now weighing options to strengthen its physical security controls against such external threats.
For NexaBank's data center in Houston, which is the most critical physical security control it should consider implementing?
a) Bulletproof glass windows and fortified walls.
b) Additional armed security personnel.
c) Flood-resistant barriers and drainage systems.
d) Advanced CCTV surveillance with facial recognition.
08. In a multinational corporation, the IT department implemented a new network security protocol for its global data centers. The protocol was designed to enhance security by incorporating advanced access control principles and employs a combination of methods to ensure that only authorized personnel can access sensitive data.
Recently, an unauthorized user gained access to confidential data. The security team discovered that the owner of a project folder had personally granted read access to an external contractor account without any review, and the intruder had taken over that contractor account.
Which aspect of the access control principles, terminologies, and models was most likely exploited?
a) Discretionary Access Control (DAC), where the resource owner decides on the access permissions.
b) Attribute-Based Access Control (ABAC), where access decisions are made based on a set of policies and attributes.
c) Role-Based Access Control (RBAC), where access is given based on the roles within the organization.
d) Mandatory Access Control (MAC), where access decisions are made based on predefined rules set by the system administrator.
09. Desmond, a forensic officer, was investigating a compromised machine involved in various online attacks. For this purpose, Desmond employed a forensic tool to extract and analyze computer-based evidence to retrieve information related to websites accessed from the victim machine.
Identify the computer-created evidence retrieved by Desmond in this scenario.
a) Documents
b) Cookies
c) Address books
d) Compressed files
10. At 9 a.m. the help desk logs three reports: a suspicious email, a slow file server and a possible ransomware note on a finance laptop. Kwame, the incident handler, analyzes and validates each report and decides which one to handle first based on its likely impact.
Which step of the EC-Council IH&R process is Kwame performing in the above scenario?
a) Incident recording and assignment
b) Containment
c) Incident triage
d) Eradication
Answers:
|
Question: 01 Answer: c |
Question: 02 Answer: a |
Question: 03 Answer: b |
Question: 04 Answer: d |
Question: 05 Answer: a |
|
Question: 06 Answer: d |
Question: 07 Answer: c |
Question: 08 Answer: a |
Question: 09 Answer: b |
Question: 10 Answer: c |
Note: For any error in EC-Council Certified Cybersecurity Technician (CCT) (212-82) certification exam sample questions, please update us by writing an email on feedback@edusum.com.
