Buy Latest May 31, 2024 112-51 Exam Q&A PDF - One Year Free Update
Download the Latest 112-51 Dump - 2024 112-51 Exam Questions
NEW QUESTION # 26
Cibel.org, an organization, wanted to develop a web application for marketing its products to the public. In this process, they consulted a cloud service provider and requested provision of development tools, configuration management, and deployment platforms for developing customized applications.
Identify the type of cloud service requested by Cibel.org in the above scenario.
- A. Platform-as-a-service
- B. Infrastructure-as-a-service {laaS)
- C. ldentity-as-a-service {IDaaS)
- D. Security-as-a-service (SECaaS)
Answer: A
Explanation:
The type of cloud
The type of cloudservice requested by Cibel.org in the above scenario is Platform-as-a-service (PaaS). PaaS is a cloud-based service that delivers a range of developer tools and deployment capabilities. PaaS provides a complete, ready-to-use, cloud-hosted platform for developing, running, maintaining and managing applications. PaaS customers do not need to install, configure, or manage the underlying infrastructure, such as servers, storage, network, or operating system. Instead, they can focus on the application development and deployment process, using the tools and services provided by the cloud service provider. PaaS solutions support cloud-native development technologies, such as microservices, containers, Kubernetes, serverless computing, that enable developers to build once, then deploy and manage consistently across private cloud, public cloud and on-premises environments. PaaS also offers features such as scalability, availability, security, backup, and monitoring for the applications. PaaS is suitable for organizations that want to develop customized applications without investing in or maintaining the infrastructure123. References:
* Network Defense Essentials Courseware, EC-Council, 2020, pp. 3-40 to 3-41
* What is PaaS? A Beginner's Guide to Platform as a Service - G2, G2, February 19, 2020
* Cloud Service Models Explained: SaaS, IaaS, PaaS, FaaS - Jelvix, Jelvix, July 14, 2020
NEW QUESTION # 27
Which of the following algorithms uses a sponge construction where message blocks are XORed into the initial bits of the state that the algorithm then invertible permutes?
- A. MD6
- B. SHA-3
- C. SHA-2
- D. MD5
Answer: B
Explanation:
SHA-3 is the algorithm that uses a sponge construction where message blocks are XORed into the initial bits of the state that the algorithm then invertible permutes. SHA-3 is a family of cryptographic hash functions that was standardized by NIST in 2015 as a successor to SHA-2. SHA-3 is based on the Keccak algorithm, which won the NIST hash function competition in 2012. SHA-3 uses a sponge construction, which is a simple iterated construction that can produce variable-length output from a fixed-length permutation. The sponge construction operates on a state of b bits, which is divided into two sections: the bitrate r and the capacity c.
The sponge construction has two phases: the absorbing phase and the squeezing phase. In the absorbing phase, the input message is padded and divided into blocks of r bits. Each block is XORed into the first r bits of the state, and then the state is transformed by the permutation function f. This process continues until all the input blocks are processed. In the squeezing phase, the output is generated by repeatedly applying the permutation function f to the state and extracting the first r bits as output blocks. The output can be truncated to the desired length. SHA-3 uses a permutation function f that is based on a round function that consists of five steps: theta, rho, pi, chi, and iota. These steps perform bitwise operations, rotations, permutations, and additions on the state. The permutation function f is invertible, meaning that it can be reversed to obtain the previous state.
SHA-3 has four variants with different output lengths: SHA3-224, SHA3-256, SHA3-384, and SHA3-512.
SHA-3 also supports two additional modes: SHAKE128 and SHAKE256, which are extendable-output functions that can produce arbitrary-length output.References:
* Network Defense Essentials Courseware, EC-Council, 2020, pp. 3-23 to 3-25
* SHA-3 - Wikipedia, Wikipedia, March 16, 2021
* The sponge and duplex constructions - Keccak Team, Keccak Team, 2020
NEW QUESTION # 28
Bob, a security professional, was recruited by an organization to ensure that application services are being delivered as expected without any delay. To achieve this, Bob decided to maintain different backup servers for the same resources so that if one backup system fails, another will serve the purpose.
Identify the IA principle employed by Bob in the above scenario.
- A. Integrity
- B. Confidentiality
- C. Availability
- D. Authentication
Answer: C
NEW QUESTION # 29
Which of the following protocols uses TLS/SSL to ensure secure transmission of data over the Internet?
- A. FTP
- B. HTTP
- C. HTTPS
- D. SCTP
Answer: C
Explanation:
HTTPS (Hypertext Transfer Protocol Secure) is a protocol that uses TLS/SSL to ensure secure transmission of data over the Internet. HTTPS is an extension of HTTP, which is the standard protocol for transferring data between web servers and browsers. HTTPS encrypts the data exchanged between the client and the server, preventing anyone from intercepting, modifying, or stealing the data. HTTPS also verifies the identity of the server using digital certificates, preventing spoofing or phishing attacks. HTTPS is widely used for web applications that handle sensitive information, such as online banking, e-commerce, or social media.
References:
* HTTPS- Week 7: Email Security
* How does SSL work? | SSL certificates and TLS | Cloudflare
* SSL and TLS: A Beginners Guide | SANS Institute
NEW QUESTION # 30
John, from a remote location, was monitoring his bedridden grandfather's health condition at his home. John has placed a smart wearable ECG on his grandfather's wrist so that he can receive alerts to his mobile phone and can keep a track over his grandfather's health condition periodically.
Which of the following types of loT communication model was demonstrated in the above scenario?
- A. Cloud-to-cloud communication model
- B. Device-to-gateway model
- C. Device-to-cloud model
- D. Device-to-device model
Answer: C
Explanation:
A device-to-cloud model is a type of IoT communication model that connects the IoT devices directly to the cloud platform, where the data is stored, processed, and analyzed. The device-to-cloud model enables remote access, real-time monitoring, and scalability of IoT applications. The device-to-cloud model requires the IoT devices to have internet connectivity and cloud compatibility. In the above scenario, John used a device-to-cloud model to monitor his grandfather's health condition, as he placed a smart wearable ECGon his grandfather's wrist that sent the data to the cloud platform, where John could access it from his mobile phone and receive alerts periodically.References:
* Communication Models in IoT (Internet of Things)- Section: Device-to-Cloud Model
* IoT Communication Models - IoTbyHVM- Section: Device to Cloud Communication Model
* Logical Design of IoT | Communication Models | APIs | Functional Blocks- Section: Device-to-Cloud Communication Model
NEW QUESTION # 31
Alice was working on her major project; she saved all her confidential files and locked her laptop. Bob wanted to access Alice's laptop for his personal use but was unable to access the laptop due to biometric authentication.
Which of the following network defense approaches was employed by Alice on her laptop?
- A. Retrospective approach
- B. Preventive approach
- C. Reactive approach
- D. Proactive approach
Answer: B
Explanation:
The network defense approach that was employed by Alice on her laptop was the preventive approach. The preventive approach aims to stop or deter potential attacks before they happen by implementing security measures that reduce the attack surface and increase the difficulty of exploitation. Biometric authentication is an example of a preventive measure that uses a physical characteristic, such as a fingerprint, iris, or face, to verify the identity of the user and grant access to the device or system. Biometric authentication is more secure than traditional methods, such as passwords or PINs, because it is harder to forge, guess, or steal. By locking her laptop and using biometric authentication, Alice prevented Bob from accessing her laptop and her confidential files without her permission.References:
* Network Defense Essentials Courseware, EC-Council, 2020, pp. 1-7 to 1-8
* What is Biometric Authentication?, Norton, July 29, 2020
* An introduction to network defense basics, Enable Sysadmin, November 26, 2019
NEW QUESTION # 32
Clark, a security team member of an organization, was instructed to secure the premises from unauthorized entries. In this process, Clark implemented security controls that allow employees to enter the office only after scanning their badges or fingerprints.
Which of the following security controls has Clark implemented in the above scenario?
- A. Physical security controls
- B. System access controls
- C. Technical security controls
- D. Administrative security controls
Answer: A
Explanation:
Physical security controls are security measures that prevent or deter unauthorized physical access to a facility, resource, or information. Physical security controls include locks, doors, gates, fences, guards, cameras, alarms, sensors, biometrics, and badges. Physical security controls protect the network and its components from theft, damage, sabotage, or natural disasters. Clark implemented physical security controls in the above scenario, as he installed security controls that allow employees to enter the office only after scanning their badges or fingerprints.References:
* Understanding the Various Types of Physical Security Controls- Week 4: Network Security Controls:
Physical Controls
* The Role of Physical Security in Maintaining Network Security
* Physical Security: Planning, Measures & Examples + PDF
NEW QUESTION # 33
George, a certified security professional, was hired by an organization to ensure that the server accurately responds to customer requests. In this process, George employed a security solution to monitor the network traffic toward the server. While monitoring the traffic, he identified attack signatures such as SYN flood and ping of death attempts on the server.
Which of the following categories of suspicious traffic signature has George identified in the above scenario?
- A. Reconnaissance
- B. Denial-of-service (DoS)
- C. Unauthorized access
- D. Informational
Answer: B
Explanation:
Denial-of-service (DoS) is the category of suspicious traffic signature that George identified in the above scenario. DoS signatures are designed to detect attempts to disrupt or degrade the availability or performance of a system or network by overwhelming it with excessive or malformed traffic. SYN flood and ping of death are examples of DoS attacks that exploit the TCP/IP protocol to consume the resources or crash the target server. A SYN flood attack sends a large number of TCP SYN packets to the targetserver, without completing the three-way handshake, thus creating a backlog of half-open connections that exhaust the server's memory or bandwidth. A ping of death attack sends a malformed ICMP echo request packet that exceeds the maximum size allowed by the IP protocol, thus causing the target server to crash or reboot.DoS attacks can cause serious damage to the organization's reputation, productivity, and revenue, and should be detected and mitigated as soon as possible123.References:
* Network Defense Essentials Courseware, EC-Council, 2020, pp. 3-33 to 3-34
* What is a denial-of-service attack?, Cloudflare, 2020
* Denial-of-service attack - Wikipedia, Wikipedia, March 16, 2021
NEW QUESTION # 34
Which of the following types of network traffic flow does not provide encryption in the data transfer process, and the data transfer between the sender and receiver is in plain text?
- A. SSL traffic
- B. FTP traffic
- C. HTTPS traffic
- D. SSH traffic
Answer: B
Explanation:
FTP traffic does not provide encryption in the data transfer process, and the data transfer between the sender and receiver is in plain text. FTP stands for File Transfer Protocol, and it is a standard network protocol for transferring files between a client and a server over a TCP/IP network. FTP uses two separate channels for communication: a control channel for sending commands and receiving responses, and a data channel for transferring files. However, FTP does not encrypt any of the data that is sent or received over these channels, which means that anyone who can intercept the network traffic can read or modify the contents of the files, as well as the usernames and passwords used for authentication. This poses a serious security risk for the confidentiality, integrity, and availability of the data and the systems involved in the file transfer. Therefore, FTP is not a secure way to transfer sensitive or confidential data over the network.References:
* Network Defense Essentials Courseware, EC-Council, 2020, pp. 3-31 to 3-32
* What is FTP, and Why Does It Matter in 2021?, Kinsta, January 4, 2021
* FTP Security, Wikipedia, February 9, 2021
NEW QUESTION # 35
Jacob, an attacker, targeted container technology to destroy the reputation of an organization. To achieve this, he initially compromised a single container exploiting weak network defaults,overloaded the rest of the containers in the local domain, and restricted them from providing services to legitimate users.
Identify the type of attack initiated by Jacob in the above scenario.
- A. Cross-container attack
- B. Container escaping attack
- C. Replay attack
- D. Docker registry attack
Answer: A
Explanation:
The type of attack initiated by Jacob in the above scenario is a cross-container attack. A cross-container attack is a type of attack that targets container technology and exploits the shared resources and network connections between containers. A cross-container attack can compromise the security and availability of multiple containers and the underlying host by performing actions such as stealing data, executing commands, consuming resources, or spreading malware. A cross-container attack can be launched by an external attacker who gains access to a container through a network vulnerability, or by a malicious insider who runs a rogue container on the same host or cluster.A cross-container attack can be prevented or mitigated by implementing security best practices for container technology, such as isolating containers, limiting privileges, enforcing policies, scanning images, and monitoring network traffic123.References:
* Network Defense Essentials Courseware, EC-Council, 2020, pp. 3-37 to 3-38
* 6 Common Kubernetes and Container Attack Techniques and How to Prevent Them - Palo Alto Networks, Palo Alto Networks, March 2, 2022
* The evolution of a matrix: How ATT&CK for Containers was built - Microsoft, Microsoft, July 21,
2021
NEW QUESTION # 36
Carol is a new employee at ApTech Sol Inc., and she has been allocated a laptop to fulfill his job activities.
Carol tried to install certain applications on the company's laptop but could not complete the installation as she requires administrator privileges to initiate the installation process. The administrator imposed an access policy on the company's laptop that only users with administrator privileges have installation rights.
Identify the access control model demonstrated in the above scenario.
- A. Mandatory access control {MAC)
- B. Role-based access control (RBAC)
- C. Rule-based access control {RB-RBAC)
- D. Discretionary access control (DAC)
Answer: B
Explanation:
Role-based access control (RBAC) is a model that assigns permissions and privileges to users based on their roles in an organization. In RBAC, the administrator defines the roles and the access rights for each role, and then assigns users to those roles. This way,the administrator can control the access of users to the resources without having to manage each user individually. In the scenario, Carol is assigned a role that does not have the installation rights, while the administrator has a role that does. Therefore, the access control model demonstrated in the scenario is RBAC.References:Network Defense Essentials - EC-Council Learning,Network Defense Essentials (NDE) | Coursera,EC-Council Network Defense Essentials | NDE Certification
NEW QUESTION # 37
Below are various authentication techniques.
1.Retina scanner
2.One-time password
3.DNA
4.Voice recognition
Identify the techniques that fall under biometric authentication.
- A. 1, 3, and 4
- B. 1, 2, and 3
- C. 2, 3, and 4
- D. 1, 2, and 4
Answer: A
Explanation:
Biometric authentication is a type of authentication that uses the physical or behavioral characteristics of a person to verify their identity. Biometric authentication is more secure and convenient than other methods such as passwords or tokens, as biometric traits are unique, hard to forge, and easy to use. Some examples of biometric authentication techniques are retina scanner, DNA, and voice recognition. Retina scanner uses a low-intensity light beam to scan the pattern of blood vessels at the back of the eye, which is unique for each individual. DNA uses the genetic code of a person to match their identity, which is the most accurate and reliable biometric technique. Voice recognition uses the sound and pitch of a person's voice to verify their identity, which is influenced by factors such as anatomy, physiology, and psychology. These techniques fall under biometric authentication, as they use the physical or behavioral traits of a person to authenticate them.
References:
* Biometric Authentication- Week 2: Identification, Authentication, and Authorization
* Biometric Authentication: What You Need To Know
* Biometric Authentication Techniques
NEW QUESTION # 38
Which of the following IDS components analyzes the traffic and reports if any suspicious activity is detected?
- A. Network sensor
- B. Response system
- C. Command console
- D. Database of attack signatures
Answer: A
Explanation:
The IDS component that analyzes the traffic and reports if any suspicious activity is detected is the network sensor. A network sensor is a device or software application that is deployed at a strategic point or points within the network to monitor and capture the network traffic to and from all devices on the network. A network sensor can operate in one of two modes: promiscuous or inline. In promiscuous mode, the network sensor passively listens to the network traffic and copies the packets for analysis. In inline mode, the network sensor actively intercepts and filters the network traffic and can block or modify the packets based on predefined rules. A network sensor analyzes the network traffic using various detection methods, such as signature-based, anomaly-based, or reputation-based, and compares the traffic patterns with a database of attack signatures or a model of normal behavior. If the network sensor detects any suspicious or malicious activity, such as a reconnaissance scan, an unauthorized access attempt, or a denial-of-service attack, it generates an alert and reports it to the IDS manager or the operator.A network sensor can also integrate with a response system to take appropriate actions, such as logging, notifying, or blocking, in response to the detected activity123.References:
* Network Defense Essentials Courseware, EC-Council, 2020, pp. 3-33 to 3-34
* Intrusion Detection System (IDS) - GeeksforGeeks, GeeksforGeeks, 2020
* Intrusion detection system - Wikipedia, Wikipedia, March 16, 2021
NEW QUESTION # 39
Peter, a network defender, was instructed to protect the corporate network from unauthorized access. To achieve this, he employed a security solution for wireless communication that uses dragonfly key exchange for authentication, which is the strongest encryption algorithm that protects the network from dictionary and key recovery attacks.
Identify the wireless encryption technology implemented in the security solution selected by Peter in the above scenario.
- A. WPA3
- B. WEP
- C. EAP
- D. WPA
Answer: A
Explanation:
WPA3 is the latest standard of Wi-Fi Protected Access, which was released in 2018 by the Wi-Fi Alliance.
WPA3 uses a new handshake protocol called Simultaneous Authentication of Equals (SAE), which is based on a zero-knowledge proof known as dragonfly. Dragonfly is a key exchange algorithm that uses discrete logarithm cryptography to derive a shared secret between two parties, without revealing any information about their passwords or keys. Dragonfly is resistant to offline dictionary attacks, where an attacker tries to guess the password by capturing the handshake and testing different combinations. Dragonfly is also resistant to key recovery attacks, where an attacker tries to recover the encryption key by exploiting weaknesses in the algorithm or implementation. Dragonfly provides forward secrecy, which means that even if an attacker manages to compromise the password or key in the future, they cannot decrypt the past communication.
WPA3 also supports other features such as increased key sizes, opportunistic wireless encryption, and protected management frames, which enhance the security and privacy of wireless networks.References:
* WPA3 Dragonfly Handshake
* WPA3 Encryption and Configuration Guide
* Dragon Fly - Zero Knowledge Proof
* What is SAE (Simultaneous Authentication of Equals)?
* Dragonfly - people.scs.carleton.ca
NEW QUESTION # 40
Which of the following objects of the container network model (CNM) contains the configuration files of a container's network stack, such as routing table, container's interfaces, and DNS settings?
- A. IPAM drivers
- B. Endpoint
- C. Sandbox
- D. Network drivers
Answer: C
Explanation:
The object of the container network model (CNM) that contains the configuration files of a container's network stack, such as routing table, container's interfaces, and DNSsettings, is the Sandbox. A Sandbox is a logical entity that encapsulates the network configuration and state of a container. A Sandbox can contain one or more endpoints from different networks, and provides isolation and security for the container's network stack. A Sandbox can be implemented using various technologies, such as Linux network namespaces, FreeBSD jails, or Windows compartments.A Sandbox allows the container to have its own view and control of the network resources, such as interfaces, addresses, routes, and DNS settings123.References:
* The Container Networking Model | Training, Training, 2020
* A Comprehensive Guide To Docker Networking - KnowledgeHut, KnowledgeHut, September 27, 2023
* Design - GitHub: Let's build from here, GitHub, 2020
NEW QUESTION # 41
Robert, an ISP, was instructed to provide network connectivity to all areas even if some locations are inaccessible to capture direct signals from wireless access points. In this process, Robert used a wireless network component that takes a signal from one access point and boosts its signal strength to create a new network.
Identify the component of the wireless network employed by Robert in the above scenario.
- A. Wireless repeater
- B. Mobile hotspot
- C. Wireless NIC
- D. Wireless bridge
Answer: A
Explanation:
A wireless repeater is a wireless network component that takes a signal from one access point and boosts its signal strength to create a new network. A wireless repeater can extend the range of a wireless network by repeating the signal from the original access point. This way, the wireless repeater can provide network connectivity to areas that are inaccessible to capture direct signals from the access point.In the scenario, Robert used a wireless repeater to provide network connectivity to all areas12.References:Network Defense Essentials - EC-Council Learning,Understanding the Wireless Network Components
NEW QUESTION # 42
Finch, a security professional, was instructed to strengthen the security at the entrance. At the doorway, he implemented a security mechanism that allows employees to register their retina scan and a unique six- digit code, using which they can enter the office at any time.
Which of the following combinations of authentication mechanisms is implemented in the above scenario?
- A. Two-factor and smart card authentication
- B. Smart card and password authentication
- C. Password and two-factor authentication
- D. Biornetric and password authentication
Answer: D
Explanation:
The combination of authentication mechanisms that is implemented in the above scenario is biometric and password authentication. Biometric authentication is a type of authentication that uses an inherent factor, such as a retina scan, to verify the identity of the user. Password authentication is a type of authentication that uses a knowledge factor, such as a six-digit code, to verify the identity of the user. By combining biometric and password authentication, Finch has implemented a two-factor authentication (2FA) system that requires the user to provide two different types of authentication factors to gain access to the office. 2FA is a more secure way of authentication than using a single factor, as it reduces the risk of unauthorized access due to stolen or compromised credentials.Biometric and password authentication is a common 2FA method that is used in many applications, such as banking, e-commerce, or health care123.References:
* Network Defense Essentials Courseware, EC-Council, 2020, pp. 3-28 to 3-29
* What is Biometric Authentication?, Norton, July 29, 2020
* What is Two-Factor Authentication (2FA)?, Authy, 2020
NEW QUESTION # 43
George, a certified security professional, was hired by an organization to ensure that the server accurately responds to customer requests. In this process, George employed a security solution to monitor the network traffic toward the server. While monitoring the traffic, he identified attack signatures such as SYN flood and ping of death attempts on the server.
Which of the following categories of suspicious traffic signature has George identified in the above scenario?
- A. Reconnaissance
- B. Denial-of-service (DoS)
- C. Unauthorized access
- D. Informational
Answer: B
NEW QUESTION # 44
An loT sensor in an organization generated an emergency alarm indicating a security breach. The servers hosted in an loT layer accepted, stored, and processed the sensor data received from loT gateways and created dashboards for monitoring, analyzing, and implementing proactive decisions to tackle the issue.
Which of the following layers in the loT architecture performed the above activities after receiving an alert from the loT sensor?
- A. Communication Layer
- B. Device layer
- C. Cloud layer
- D. Process layer
Answer: C
Explanation:
The cloud layer of IoT architecture is the layer that hosts the servers that accept, store, and process the sensor data received from IoT gateways. The cloud layer also creates dashboards for monitoring, analyzing, and implementing proactive decisions to tackle the issue. The cloud layer provides scalability, reliability, and security for the IoT system.The cloud layer can use various cloud computing models, such as public, private, hybrid, or community clouds12.References:Network Defense Essentials - EC-Council Learning,IoT Architecture: The 4 Layers of an IoT System
NEW QUESTION # 45
......
Verified 112-51 Dumps Q&As - 1 Year Free & Quickly Updates: https://passtorrent.testvalid.com/112-51-valid-exam-test.html