112-52 by EC-COUNCIL Actual Free Exam Q&As

Question 1

Which is the MOST effective countermeasure against social engineering attacks?

A. Network traffic monitoring B. Employee security awareness training C. Port hardening D. Strong encryption algorithms

Discussion 0

Correct Answer: B Vote an answer

Question 2

Which practice should be implemented to secure a cloud environment effectively?

A. Using single-factor authentication B. Enforcing encryption for data at rest and in transit C. Allowing unrestricted access D. Avoiding regular security assessments

Discussion 0

Correct Answer: B Vote an answer

Question 3

Which of the following is considered a physical threat?

A. Tailgating B. SQL injection C. Phishing D. Cross-site scripting

Discussion 0

Correct Answer: A Vote an answer

Question 4

What is the primary goal of session hijacking attacks?

A. To disrupt communication between network devices B. To steal credentials through phishing C. To perform vulnerability scans on the network D. To take control of an active session between a user and a server

Discussion 0

Correct Answer: D Vote an answer

Question 5

Which of the following best describes a zero-day vulnerability?

A. A vulnerability that exists for zero days before being detected B. A vulnerability that affects all versions of a software C. A vulnerability that is exploited before the vendor has issued a patch D. A vulnerability that does not require user interaction to be exploited

Discussion 0

Correct Answer: C Vote an answer

Question 6

Which principle ensures that only authorized individuals can access information?

A. Availability B. Integrity C. Accountability D. Confidentiality

Discussion 0

Correct Answer: D Vote an answer

Question 7

Which of the following is an effective countermeasure against password cracking?

A. Using long, complex passwords B. Using the same password across systems C. Storing passwords in plaintext D. Disabling account lockout policies

Discussion 0

Correct Answer: A Vote an answer

Question 8

Which measure significantly improves wireless network security?

A. Using WPA3 encryption B. Disabling firewall protections C. Allowing unrestricted guest access D. Allowing unrestricted guest access

Discussion 0

Correct Answer: A Vote an answer

Question 9

What is a key security concern when using public cloud services?

A. Data visibility and control B. Limited resource availability C. Shared responsibility model D. Low scalability

Discussion 0

Correct Answer: A Vote an answer

Question 10

Which approach is crucial in defending against DoS/DDoS attacks?

A. Implementing network segmentation B. Establishing comprehensive monitoring and alerting systems C. Increasing the complexity of system passwords D. Regularly backing up data

Discussion 0

Correct Answer: B Vote an answer

Question 11

What is an effective countermeasure against web server attacks?

A. Using prepared statements in database queries B. Encrypting data at rest C. Implementing network firewalls D. Validating and sanitizing user input

Discussion 0

Correct Answer: D Vote an answer

Question 12

Which of the following is a strong indicator of a potential insider threat?

A. Consistent adherence to security policies B. Increased data usage C. Prompt reporting of suspicious activity D. Regular participation in security training

Discussion 0

Correct Answer: B Vote an answer

EC-COUNCIL EC-Council Ethical Hacking Essentials (EHE) - 112-52 Exam Practice Test