Certified Cybersecurity Technician (212-82) Free Practice Test

Question 1

An MNC hired Brandon, a network defender, to establish secured VPN communication between the company's remote offices. For this purpose, Brandon employed a VPN topology where all the remote offices communicate with the corporate office but communication between the remote offices is denied.
Identify the VPN topology employed by Brandon in the above scenario.

A. Point-to-Point VPN topology

B. Hub-and-Spoke VPN topology

C. Star topology

D. Full-mesh VPN topology

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which of the following are examples of physical security controls? (Select all that apply)

A. Firewalls

B. Biometric access control

C. Security guards

D. Encryption algorithms

Correct Answer: B,C

Question 3

You recently purchased a smart thermostat for your home. It allows you to control the temperature remotely through a mobile app. Considering the security of your new smart thermostat, which of the following actions would be the LEAST effective In protecting It from unauthorized access?

A. Leaving the thermostat connected to the "Guest" Wi-Fi network in your home, which is open to all guests.

B. Keeping the thermostat firmware updated with the latest security patches from the manufacturer.

C. Enabling remote access to the thermostat only on your secure home Wi-Fi network.

D. Changing the default password for the mobile app and thermostat upon initial setup.

Correct Answer: A

Question 4

As a network security analyst for a video game development company, you are responsible for monitoring the traffic patterns on the development server used by programmers. During business hours, you notice a steady stream of data packets moving between the server and internal programmer workstations. Most of this traffic is utilizing TCP connections on port 22 (SSH) and port 5900 (VNC).
Based on this scenario, what does it describe?

A. Traffic seems normal SSH and VNC are commonly used by programmers for secure remote access and collaboration.

B. Traffic appears suspicious - The presence of encrypted connections might indicate attempts to conceal malicious activities.

C. The situation is inconclusive - Further investigation is necessary to determine the nature of the traffic.

D. Traffic is because of malware infection - Frequently used SSH & VNC Ports could indicate malware spreading through the Network.

Correct Answer: A

Question 5

Grace, an online shopping freak, has purchased a smart TV using her debit card. During online payment, Grace's browser redirected her from ecommerce website to a third-party payment gateway, where she provided her debit card details and OTP received on her registered mobile phone. After completing the transaction, Grace navigated to her online bank account and verified the current balance in her savings account.
Identify the state of data when it is being processed between the ecommerce website and the payment gateway in the above scenario.

A. Data in inactive

B. Data in use

C. Data at rest

D. Data in transit

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

The incident handling and response (IH&R) team of an organization was handling a recent cyberattack on the organization's web server. Fernando, a member of the IH&P team, was tasked with eliminating the root cause of the incident and closing all attack vectors to prevent similar incidents in future. For this purpose. Fernando applied the latest patches to the web server and installed the latest security mechanisms on it. Identify the IH&R step performed by Fernando in this scenario.

A. Eradication

B. Containment

C. Recovery

D. Notification

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

A software company develops new software products by following the best practices for secure application development. Dawson, a software analyst, is responsible for checking the performance of applications in the client's network to determine any issue faced by end users while accessing the application.
Which of the following tiers of the secure application development lifecycle involves checking the application performance?

A. Development

B. Quality assurance (QA)

C. Testing

D. Staging

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Ayden works from home on his company's laptop. During working hours, he received an antivirus software update notification on his laptop. Ayden clicked on the update button; however, the system restricted the update and displayed a message stating that the update could only be performed by authorized personnel. Which of the following PCI-DSS requirements is demonstrated In this scenario?

A. PCI-DSS requirement no 53

B. PCI-DSS requirement no 1.3.2

C. PCI-DSS requirement no 1.3.1

D. PCI-DSS requirement no 5.1

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Cassius, a security professional, works for the risk management team in an organization. The team is responsible for performing various activities involved in the risk management process. In this process, Cassius was instructed to select and implement appropriate controls on the identified risks in order to address the risks based on their severity level. Which of the following risk management phases was Cassius instructed to perform in the above scenario?

A. Risk treatment

B. Risk identification

C. Risk analysis

D. Risk prioritization

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

Nancy, a security specialist, was instructed to identify issues related to unexpected shutdown and restarts on a Linux machine. To identify the incident cause, Nancy navigated to a directory on the Linux system and accessed a log file to troubleshoot problems related to improper shutdowns and unplanned restarts.
Identify the Linux log file accessed by Nancy in the above scenario.

A. /var/log/boot.log

B. /var/log/kern.log

C. /var/log/secure

D. /var/log/lighttpd/

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 11

Analyze the executable file ShadowByte.exe located in the Downloads folder of the Attacker Machine-I and determine the Linker Info value of the file. (Practical Question)

A. 04.25

B. 2.25

C. 6.2

D. 3.5

Correct Answer: B

Question 12

In a multinational corporation, the IT department Implemented a new network security protocol for their global data centers. This protocol was designed to enhance security measures by incorporating advanced access control principles. The protocol employs a combination of methods to ensure that only authorized personnel can access sensitive data. Recently, an incident occurred where an unauthorized user gained access to confidential data. The security team discovered that the intruder exploited a specific aspect of the access control system.
Which aspect of the access control principles, terminologies, and models was most likely exploited?

A. Role-Based Access Control (RBAC). where access is given based on the roles within the organization.

B. Discretionary Access Control (DAC). where the resource owner decides on the access permissions.

C. Mandatory Access Control (MAC), where access decisions are made based on predefined rules set by the system s administrator.

D. Attribute-Based Access Control {ABAC), where access decisions are made based on a set of policies and attributes.

Correct Answer: B

Question 13

Leo has walked to the nearest supermarket to purchase grocery. At the billing section, the billing executive scanned each product's machine-readable tag against a readable machine that automatically reads the product details, displays the prices of the individual product on the computer, and calculates the sum of those scanned items. Upon completion of scanning all the products, Leo has to pay the bill.
Identify the type of short-range wireless communication technology that the billing executive has used in the above scenario.

A. Radio-frequency identification (RFID)

B. QR codes and barcodes

C. QUIC

D. Near-field communication (NFC)

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 14

Jase. a security team member at an organization, was tasked with ensuring uninterrupted business operations under hazardous conditions. Thus, Jase implemented a deterrent control strategy to minimize the occurrence of threats, protect critical business areas, and mitigate the impact of threats. Which of the following business continuity and disaster recovery activities did Jase perform in this scenario?

A. Restoration

B. Prevention

C. Response

D. Recovery

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

ECCouncil Certified Cybersecurity Technician (212-82) Free Practice Test