ECCouncil 212-82 問題集

質問 1：
You work in a Multinational Company named Vector Inc. on Hypervisors and Virtualization Software. You are using the Operating System (OS) Virtualization and you have to handle the Security risks associated with the OS virtualization. How can you mitigate these security risks?
A. Regularly patch and update the hypervisor software for security fixes.
B. Disable security features on virtual machines to improve performance.
C. Implement least privilege access control for users managing VMs.
D. All of the above
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Camden, a network specialist in an organization, monitored the behavior of the organizational network using SIFM from a control room. The SIEM detected suspicious activity and sent an alert to the camera. Based on the severity of the incident displayed on the screen, Camden made the correct decision and immediately launched defensive actions to prevent further exploitation by attackers.
Which of the following SIEM functions allowed Camden to view suspicious behavior and make correct decisions during a security incident?
A. Application log monitoring
B. Dashboard
C. Data aggregation
D. Log Retention
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
In an organization, all the servers and database systems are guarded in a sealed room with a single-entry point.
The entrance is protected with a physical lock system that requires typing a sequence of numbers and letters by using a rotating dial that intermingles with several other rotating discs.
Which of the following types of physical locks is used by the organization in the above scenario?
A. Digital locks
B. Electromagnetic locks
C. Combination locks
D. Mechanical locks
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Identify a machine in the network with 5SH service enabled. Initiate an SSH Connection to the machine, find the file, ttag.txt. in the machine, and enter the tile's content as the answer. The credentials tor SSH login are sam/adm(admin@123. {Practical Question)
A. sam@bob
B. bob2@sam
C. sam2@bob
D. bobt@sam
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
An attacker with malicious intent used SYN flooding technique to disrupt the network and gain advantage over the network to bypass the Firewall. You are working with a security architect to design security standards and plan for your organization. The network traffic was captured by the SOC team and was provided to you to perform a detailed analysis. Study the Synflood.pcapng file and determine the source IP address.
Note: Synflood.pcapng file is present in the Documents folder of Attacker-1 machine.
A. 20.20.10.180
B. 20.20.10.59
C. 20.20.10.19
D. 20.20.10.60
正解：C
解説: (Topexam メンバーにのみ表示されます)