Free 212-82: Certified Cybersecurity Technician Exam Questions and Answers

Last updated: September 12, 2026

Exam code

212-82

Provider

ECCouncil

Questions in our bank

1000+

Free to read

First 10, with answers

Official page

Official Exam website

Our test mode duration & pass mark

130 mins · 70%

Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.

1. Question #1

   Sam, a software engineer, visited an organization to give a demonstration on a software tool that helps in business development. The administrator at the organization created a least privileged account on a system and allocated that system to Sam for the demonstration. Using this account, Sam can only access the files that are required for the demonstration and cannot open any other file in the system. Which of the following types of accounts the organization has given to Sam in the above scenario?

   • A. User account
   • B. Guest account
   • C. Administrator account
   • D. Service account
   Reveal Answer

2. Question #2

   Gideon, a forensic officer, was examining a victim's Linux system suspected to be involved in online criminal activities. Gideon navigated to a directory containing a log file that recorded information related to user login/logout. This information helped Gideon to determine the current login state of cyber criminals in the victim system, identify the Linux log file accessed by Gideon in this scenario.

   • A. /va r/l og /mysq I
   • B. /va r/l og /wt m p
   • C. log
   • D. /ar/log/boot.iog
   Reveal Answer

3. Question #3

   You are a penetration tester working to test the user awareness of the employees of the client xyz. You harvested two employees' emails from some public sources and are creating a client-side backdoor to send it to the employees via email. Which stage of the cyber kill chain are you at?

   • A. Reconnaissance
   • B. Command and control
   • C. Weaponization
   • D. Exploitation
   Reveal Answer

4. Question #4

   Matias, a network security administrator at an organization, was tasked with the implementation of secure wireless network encryption for their network. For this purpose, Matias employed a security solution that uses 256-bit Galois/Counter Mode Protocol (GCMP-256) to maintain the authenticity and confidentiality of data. Identify the type of wireless encryption used by the security solution employed by Matias in the above scenario.

   • A. WEP encryption
   • B. WPA3 encryption
   • C. WPA encryption
   • D. WPA2 encryption
   Reveal Answer

5. Question #5

   An organization hired a network operations center (NOC) team to protect its IT infrastructure from external attacks. The organization utilized a type of threat intelligence to protect its resources from evolving threats. The threat intelligence helped the NOC team understand how attackers are expected to perform an attack on the organization, identify the information leakage, and determine the attack goals as well as attack vectors. Identify the type of threat intelligence consumed by the organization in the above scenario.

   • A. Technical threat intelligence
   • B. Tactical threat intelligence
   • C. Operational threat intelligence
   • D. Strategic threat intelligence
   Reveal Answer

6. Question #6

   Lorenzo, a security professional in an MNC, was instructed to establish centralized authentication, authorization, and accounting for remote-access servers. For this purpose, he implemented a protocol that is based on the client-server model and works at the transport layer of the OSI model. Identify the remote authentication protocol employed by Lorenzo in the above scenario.

   • A. SNMPv3
   • B. IMAPS
   • C. RADIUS
   • D. POP3S
   Reveal Answer

7. Question #7

   Rickson, a security professional at an organization, was instructed to establish short-range communication between devices within a range of 10 cm. For this purpose, he used a mobile connection method that employs electromagnetic induction to enable communication between devices. The mobile connection method selected by Rickson can also read RFID tags and establish Bluetooth connections with nearby devices to exchange information such as images and contact lists. Which of the following mobile connection methods has Rickson used in above scenario?

   • A. Satcom
   • B. NFC
   • C. ANT
   • D. Cellular communication
   Reveal Answer

8. Question #8

   Kasen, a cybersecurity specialist at an organization, was working with the business continuity and disaster recovery team. The team initiated various business continuity and discovery activities in the organization. In this process, Kasen established a program to restore both the disaster site and the damaged materials to the pre-disaster levels during an incident. Which of the following business continuity and disaster recovery activities did Kasen perform in the above scenario?

   • A. Resumption
   • B. Prevention
   • C. Recovery
   • D. Response
   Reveal Answer

9. Question #9

   The SOC department in a multinational organization has collected logs of a security event as "Windows.events.evtx". Study the Audit Failure logs in the event log file located in the Documents folder of the -Attacker Maehine-1" and determine the IP address of the attacker. (Note: The event ID of Audit failure logs is 4625.) (Practical Question)

   • A. 10.10.1.19
   • B. 10.10.1.16
   • C. 10.10.1.10
   • D. 10.10.1.12
   Reveal Answer

10. Question #10

    Warren, a member of IH&R team at an organization, was tasked with handling a malware attack launched on one of servers connected to the organization's network. He immediately implemented appropriate measures to stop the infection from spreading to other organizational assets and to prevent further damage to the organization. Identify the IH&R step performed by Warren in the above scenario.

    • A. Containment
    • B. Incident triage
    • C. Recovery
    • D. Eradication
    Reveal Answer