Free ECCouncil 212-82 Exam Dumps Questions & Answers

The incident handling and response (IH&R) team of an organization was handling a recent cyberattack on the organization's web server. Fernando, a member of the IH&P team, was tasked with eliminating the root cause of the incident and closing all attack vectors to prevent similar incidents in future. For this purpose. Fernando applied the latest patches to the web server and installed the latest security mechanisms on it. Identify the IH&R step performed by Fernando in this scenario.

• A.  Eradication
• B.  Recovery
• C.  Containment
• D.  Notification

ProNet, a leading technology firm, has been dynamically evolving its internal infrastructure to cater to an expanding workforce and changing business needs. The company's current project involves enhancing the overall security of its internal platforms. The company's security team is focusing on a robust access control system. To make the system efficient, it needs to implement a model that would define access based on roles within the organization, where specific roles would have predefined access to certain resources, and the roles can be assigned to multiple users. The aim is to decrease the administrative work involved in assigning permissions and ensure that users gain only the necessary permissions in line with their job functions. Which access control model best suits ProNet's requirement?

• A.  Role-Based Access Control (RBAC)
• B.  Mandatory Access Control (MAC)
• C.  Discretionary Access Control (DAC)
• D.  Attribute-Based Access Control (ABAC)

You are the Lead Cybersecurity Specialist at GlobalTech, a multinational tech conglomerate renowned for its avant-garde technological solutions in the aerospace and defense sector. The organization's reputation stands on the innovative technologies it pioneers, many of which are nation's top secrets.
Late on a Sunday night, you are alerted about suspicious activities on a server holding the schematics and project details for a groundbreaking missile defense system. The indicators suggest a complex, multi-stage cyberattack that managed to bypass traditional security measures. Preliminary investigations reveal that the cybercrlmlnals might have used an Insider's credentials, further complicating the breach. Given the extremely sensitive nature of the data involved, a leak could have severe national security implications and irreparably tarnish the company's reputation. Considering the potential gravity and intricacies of this security incident, what immediate action should you undertake to handle this situation effectively, safeguard crucial data, and minimize potential fallout?

• A.  Inform the top executive board and legal team about the breach. Prepare a public statement to ensure shareholders and clients are kept in the loop about the incident and the measures being undertaken.
• B.  Engage with an external specialized cybersecurity firm to conduct a parallel investigation, leveraging its expertise to identify the culprits and understand the breach's modus operandi.
• C.  Initiate the incident response protocol, focusing on immediate containment by isolating the impacted server. Concurrently, assess the breadth and depth of the breach by examining network logs and affected systems.
• D.  Notify federal agencies about the potential breach of national security. Work in tandem with them to ensure all necessary measures are taken to prevent further data exfiltration and protect national interests.

Anderson, a security engineer, was Instructed to monitor all incoming and outgoing traffic on the organization's network to identify any suspicious traffic. For this purpose, he employed an analysis technique using which he analyzed packet header fields such as IP options, IP protocols, IP fragmentation flags, offset, and identification to check whether any fields are altered in transit.
Identify the type of attack signature analysis performed by Anderson in the above scenario.

• A.  Context-based signature analysis
• B.  Atomic-signature-based analysis
• C.  Composite-signature-based analysis
• D.  Content-based signature analysis

Ashton is working as a security specialist in SoftEight Tech. He was instructed by the management to strengthen the Internet access policy. For this purpose, he implemented a type of Internet access policy that forbids everything and imposes strict restrictions on all company computers, whether it is system or network usage.
Identify the type of Internet access policy implemented by Ashton in the above scenario.

• A.  Permissive policy
• B.  Prudent policy
• C.  Promiscuous policy
• D.  Paranoid policy