ECCouncil Updated 212-82 Exam Questions and Answers by dennis

Geofencing is a technique that uses GPS features to determine the proximity of a user’s mobile device to an exact location. Geofencing can be used to create a virtual barrier positioned at a static location to interact with mobile users crossing the barrier. Geofencing can be used for marketing, security, and tracking purposes2.

References: What is Geofencing?

Riley’s public key is the key that Louis used to verify the digital signature in the above scenario. A digital signature is a cryptographic technique that verifies the authenticity and integrity of a message or document. A digital signature is created by applying a hash function to the message or document and then encrypting the hash value with the sender’s private key. A digital signature can be verified by decrypting the hash value with the sender’s public key and comparing it with the hash value of the original message or document . Riley’s public key is the key that corresponds to Riley’s private key, which he used to sign the message. Louis’s public key is the key that corresponds to Louis’s private key, which he may use to encrypt or decrypt messages with Riley. Louis’s private key is the key that only Louis knows and can use to sign or decrypt messages. Riley’s private key is the key that only Riley knows and can use to sign or encrypt messages.

Quid pro quo is the social engineering technique that Johnson employed in the above scenario. Social engineering is a technique that involves manipulating or deceiving people into performingactions or revealing information that can be used for malicious purposes. Social engineering can be performed through various methods, such as phone calls, emails, websites, etc. Quid pro quo is a social engineering method that involves offering a service or a benefit in exchange for information or access. Quid pro quo can be used to trick victims into believing that they are receiving help or assistance from a legitimate source, while in fact they are compromising their security or privacy . In the scenario, Johnson performed quid pro quo by claiming himself to represent a technical support team from a vendor and offering to help sibertech.org with a server issue, while in fact he prompted the victim to execute unusual commands and install malicious files, which were then used to collect and pass critical information to Johnson’s machine. Diversion theft is a social engineering method that involves diverting the delivery or shipment of goods or assets to a different location or destination. Elicitation is a social engineering method that involves extracting information from a target by engaging them in a conversation or an interaction. Phishing is a social engineering method that involves sending fraudulent emails or messages that appear to come from a trusted source, such as a bank, a company, or a person, and asking the recipient to click on a link, open an attachment, or provide personal or financial information.

In the context of developing a cryptographic protocol resilient against quantum computing attacks, SHA-3 is the most appropriate choice. Here’s why:

Quantum Computing Threats: Quantum computers can potentially break current cryptographic methods like RSA and ECC due to Shor's algorithm. Traditional hash functions like SHA-256 might not offer sufficient security in a post-quantum world.

SHA-3 Overview: SHA-3, part of the Secure Hash Algorithm family, was designed with quantum resistance in mind. It was selected through an open competition by NIST, ensuring it incorporates advanced cryptographic techniques.

Resilience: SHA-3’s design is fundamentally different from SHA-2, providing enhanced security properties, including resistance to various attack vectors that might be feasible with quantum computing advancements.

References:

NIST SHA-3 Standard:NIST FIPS PUB 202

Research on quantum-resistant cryptography:IEEE Xplore