Free ECCouncil 112-51 Practice Exam with Questions & Answers | Set: 2

HitmanPro is a tool that is designed to identify and prevent malicious Trojans or malware from infecting computer systems or electronic devices. HitmanPro is a cloud-based malware scanner that can detect and remove various types of malware, such as viruses, ransomware, spyware, rootkits, etc.HitmanPro can also work alongside other antivirus programs and provide a second opinion on the security status of the system12.References:Network Defense Essentials - EC-Council Learning,HitmanPro - Malware Removal Tool | Sophos

anonymous proxy is a type of proxy that hides the user’s IP address and other identifying information from the web servers they access. An anonymous proxy acts as an intermediary between the user and the internet, and it modifies the HTTP headers to prevent the web servers from tracking the user’s location, browser, or device. An anonymous proxy can help the user bypass geo-restrictions, censorship, and online surveillance. However, an anonymous proxy does not encrypt the user’s traffic, and it may still leak some information to the proxy provider or other third parties. An anonymous proxy is the type of proxy employed by Mary in the above scenario, as she used a proxy tool that makes her online activity untraceable.References:

• What is a Proxy Server and How Does it Work?
• 13 Best Proxy Tools for PC [2024 Reviewed]- Section: Anonymous proxies
• The Fastest Free Proxy

Two-factor authentication (2FA) is a type of authentication that requires users to provide two or more forms of verification to access an online account. 2FA is a multi-layered security measure designed to prevent hackers from accessing user accounts using stolen or shared credentials. 2FA typically combines something the user knows (such as a password or PIN), something the user has (such as a phone or a token), and/or something the user is (such as a fingerprint or a face scan). In the above scenario, the banking application employs 2FA by asking Kevin to enter his registered credentials (something he knows) and an OTP sent to his mobile (something he has) before transferring the amount to Flora’s account.References:

• Improve Your Cybersecurity with Password MFA - Defense.com™
• What Is Two-Factor Authentication (2FA)? | Microsoft Security
• Selecting Secure Multi-factor Authentication Solutions

System-based risk is a type of mobile device security risk that arises from the vulnerabilities or flaws in the operating system or firmware of the device. System-based risk can expose the device to malware, spyware, ransomware, or other malicious attacks that can compromise the data, functionality, or privacy of the device. System-based risk can be mitigated by applying regular security updates and patches from the manufacturer or vendor, as well as using antivirus or anti-malware software. In the above scenario, Stella’s device faced a system-based risk, as it ran with an obsolete OS version that had vulnerabilities that allowed the files to be replaced. She ignored the messages from the manufacturer for updates, which could have prevented the risk.References:

• Mobile Device Security Risks- Week 8: Mobile Device Security
• Is It Safe to Use an Old or Used Phone? Here’s What You Should Know
• Obsolete products - The National Cyber Security Centre

A private cloud is a cloud deployment model that is exclusively used by a single organization and is hosted either on-premises or off-premises by a third-party provider. A private cloud offers the highest level of security and control over the data and resources, as the organization can customize the cloud infrastructure and services according to its needs and policies. A private cloud also ensures better performance and availability, as the organization does not share the cloud resources with other users. A private cloud is suitable for organizations that have sensitive or confidential data, strict compliance requirements, or high demand for scalability and flexibility. A private cloud can help Kelly secure the corporate data and retain full control over the data in the above scenario.References:

• Private Cloud- Week 6: Virtualization and Cloud Computing
• Private Cloud vs Public Cloud vs Hybrid Cloud
• Private Cloud Security: Challenges and Best Practices

A permissive policy is a type of Internet access policy that allows users to access the Internet from any device and any location, without any restrictions or security measures. A permissive policy provides convenience and flexibility for the users, but also exposes them to various risks, such as malware infection, data leakage, or cyberattacks. In the scenario, Sarah was accessing confidential office files from a remote location via her personal computer connected to the public Internet, and accidentally downloaded a malicious file onto her computer.This indicates that the organization had a permissive policy for Internet access12.References:Network Defense Essentials - EC-Council Learning,Internet Access Policy: Definition and Best Practices

A transposition cipher is a type of cipher that encrypts a document by rearranging the same characters to produce the ciphertext. A transposition cipher does not change the identity or frequency of the characters, but only their position. A transposition cipher can use various methods to permute the characters, such as writing them in a grid and reading them in a different order, or shifting them along a rail fence pattern. A transposition cipher is a simple and fast algorithm, but it can be easily broken by frequency analysis or anagramming. A transposition cipher is the type of cipher employed by Kevin in the above scenario, as he used a simple algorithm to encrypt the document that just rearranges the same characters to produce the ciphertext.References:

• Transposition cipher- Wikipedia
• Network Security: Transposition Cipher Techniques- Coding Streets
• Network Defense Essentials (NDE) | Coursera- Module 4: Cryptography Techniques
• Columnar Transposition Cipher- GeeksforGeeks

A coaxial cable is a type of network cable that is made up of a single copper conductor at its center and a plastic layer that provides an insulated center conductor with a braided metal shield. The metal shield helps to reduce electromagnetic interference and noise from external sources.Coaxial cables are commonly used for cable TV, radio, and broadband internet connections12.References:Different Types of Network Cable and Specifications,Network Defense Essentials - EC-Council Learning

RSA is a public-key cryptosystem that uses modular arithmetic and elementary number theory for Internet encryption and user authentication. RSA stands for Rivest-Shamir-Adleman, the names of the inventors of the algorithm. RSA allows users to generate a pair of keys, one public and one private, that are mathematically related. The public key can be used to encrypt messages or verify digital signatures, while the private key can be used to decrypt messages or create digital signatures.RSA is based on the difficulty of factoring large numbers, which makes it secure and widely used12.References:What is Public-Key Cryptosystem in Information Security?,Network Defense Essentials (NDE) | Coursera

SHA-3 is the algorithm that uses a sponge construction where message blocks are XORed into the initial bits of the state that the algorithm then invertible permutes. SHA-3 is a family of cryptographic hash functions that was standardized by NIST in 2015 as a successor to SHA-2. SHA-3 is based on the Keccak algorithm, which won the NIST hash function competition in 2012. SHA-3 uses a sponge construction, which is a simple iterated construction that can produce variable-length output from a fixed-length permutation. The sponge construction operates on a state of b bits, which is divided into two sections: the bitrate r and the capacity c. The sponge construction has two phases: the absorbing phase and the squeezing phase. In the absorbing phase, the input message is padded and divided into blocks of r bits. Each block is XORed into the first r bits of the state, and then the state is transformed by the permutation function f. This process continues until all the input blocks are processed. In the squeezing phase, the output is generated by repeatedly applying the permutation function f to the state and extracting the first r bits as output blocks. The output can be truncated to the desired length. SHA-3 uses a permutation function f that is based on a round function that consists of five steps: theta, rho, pi, chi, and iota. These steps perform bitwise operations, rotations, permutations, and additions on the state. The permutation function f is invertible, meaning that it can be reversed to obtain the previous state. SHA-3 has four variants with different output lengths: SHA3-224, SHA3-256, SHA3-384, and SHA3-512. SHA-3 also supports two additional modes: SHAKE128 and SHAKE256, which are extendable-output functions that can produce arbitrary-length output.References:

• Network Defense Essentials Courseware, EC-Council, 2020, pp. 3-23 to 3-25
• SHA-3 - Wikipedia, Wikipedia, March 16, 2021
• The sponge and duplex constructions - Keccak Team, Keccak Team, 2020