112-12 Practice Questions
Prepare for 112-12 with more than an answer.
- Exam fee
- $149 USD
- Level
- Foundational
- Valid for
- Not part of EC-Council Continuing Education Scheme
Domains covered on the exam 12
- Introduction to Data Security10%
- Securing Operating Systems10%
- Malware and Antivirus8%
- Internet Security8%
- Security on Social Networking Sites6%
- Securing Email Communications8%
- Securing Mobile Devices8%
- Securing the Cloud10%
- Securing Network Connections12%
- Data Backup and Disaster Recovery8%
- Securing IoT Devices and Gaming Consoles6%
- Secure Remote Work6%
- 1
When configuring a new Mac running OS X, a user wants to ensure that malicious software downloaded from the internet cannot be installed without their explicit approval. Which built-in Mac OS security feature is specifically designed to enforce this by verifying the source of downloaded applications?
Show answer details
Correct answer: B
Gatekeeper is a macOS security feature that helps protect the system from malware and misbehaving apps downloaded from the internet. It checks if the app is from an identified developer or the App Store before allowing it to run. FileVault is for disk encryption, and Time Machine is for backups.
- 2
True or False: Disabling User Account Control (UAC) in Windows 10 improves system security by preventing third-party applications from interrupting the user with constant permission prompts.
Show answer details
Correct answer: B
False. Disabling User Account Control (UAC) significantly degrades system security. UAC ensures that applications only run with standard user privileges unless an administrator explicitly authorizes an elevation of privilege. Disabling it allows malware to silently execute with administrative rights.
- 3
A user is evaluating the security of their personal data. They understand that financial records are valuable, but they question why cybercriminals would want their basic demographic information, such as date of birth, mother's maiden name, and home address. What is the primary reason this specific type of data is highly targeted in the digital age?
Show answer details
Correct answer: D
Basic demographic and personal history data act as digital building blocks. Cybercriminals aggregate this information to answer security questions, impersonate the victim, and commit identity theft, which is often more lucrative long-term than simply stealing a credit card number.
- 4
A healthcare portal experiences a security incident where a malicious actor successfully alters the blood type information in several patients' electronic records. The system never went offline, and the data was not stolen or viewed by unauthorized external parties, as the attacker used an automated script internally. Which principle of the CIA triad was explicitly violated in this scenario?
Show answer details
Correct answer: B
Integrity ensures that data remains accurate and unaltered by unauthorized parties. Because the attacker modified the blood types, the integrity of the data was compromised. Since the system stayed online (Availability) and the data wasn't exfiltrated or viewed by the external attacker (Confidentiality), Integrity is the primary violation here.
