Share ECCouncil 212-89 exam practice questions and answers from Lead4Pass latest updated 212-89 dumps free of charge. Get the latest uploaded 212-89 dumps pdf from google driver online. To get the full ECCouncil 212-89 dumps PDF or dumps VCE visit: https://www.leads4pass.com/212-89.html (Q&As: 163). all ECCouncil 212-89 exam questions have been updated, the answer has been corrected!
Make sure your exam questions are real and effective to help you pass your first exam!
[ECCouncil 212-89 Dumps pdf] Latest ECCouncil 212-89 Dumps PDF collected by Lead4pass Google Drive:
https://drive.google.com/file/d/1amabCYp99mLRwvzMQa2Tc94975BMqd9s/
Latest Update ECCouncil 212-89 Exam Practice Questions and Answers Online Test
QUESTION 1
Adam calculated the total cost of a control to protect 10,000 $ worth of data as 20,000 $. What do you advise Adam to
do?
A. Apply the control
B. Not to apply the control
C. Use qualitative risk assessment
D. Use semi-qualitative risk assessment instead
Correct Answer: B
QUESTION 2
Spyware tool used to record malicious user\\’s computer activities and keyboard stokes is called:
A. adware
B. Keylogger
C. Rootkit
D. Firewall
Correct Answer: B
QUESTION 3
Which of the following is NOT one of the techniques used to respond to insider threats:
A. Placing malicious users in quarantine network, so that attack cannot be spread
B. Preventing malicious users from accessing unclassified information
C. Disabling the computer systems from network connection
D. Blocking malicious user accounts
Correct Answer: B
QUESTION 4
What is the best staffing model for an incident response team if current employees\\’ expertise is very low?
A. Fully outsourced
B. Partially outsourced
C. Fully insourced
D. All the above
Correct Answer: A
QUESTION 5
ADAM, an employee from a multinational company, uses his company\\’s accounts to send e-mails to a third party with
their spoofed mail address. How can you categorize this type of account?
A. Inappropriate usage incident
B. Unauthorized access incident
C. Network intrusion incident
D. Denial of Service incident
Correct Answer: A
QUESTION 6
A computer forensic investigator must perform a proper investigation to protect digital evidence. During the
investigation, an investigator needs to process large amounts of data using a combination of automated and manual
methods. Identify the computer forensic process involved:
A. Analysis
B. Preparation
C. Examination
D. Collection
Correct Answer: C
QUESTION 7
The free, open source, TCP/IP protocol analyzer, sniffer and packet capturing utility standard across many industries
and educational institutions is known as:
A. Snort
B. Wireshark
C. Cain and Able
D. nmap
Correct Answer: B
QUESTION 8
In which of the steps of NIST\\’s risk assessment methodology are the boundary of the IT system, along with the
resources and the information that constitute the system identified?
A. Likelihood Determination
B. Control recommendation
C. System characterization
D. Control analysis
Correct Answer: C
QUESTION 9
Which of the following is NOT a digital forensic analysis tool:
A. Access Data FTK
B. EAR/ Pilar
C. Guidance Software EnCase Forensic
D. Helix
Correct Answer: B
QUESTION 10
Which test is conducted to determine the incident recovery procedures effectiveness?
A. Live walk-throughs of procedures
B. Scenario testing
C. Department-level test
D. Facility-level test
Correct Answer: A
QUESTION 11
According to US-CERT; if an agency is unable to successfully mitigate a DOS attack it must be reported within:
A. One (1) hour of discovery/detection if the successful attack is still ongoing
B. Two (2) hours of discovery/detection if the successful attack is still ongoing
C. Three (3) hours of discovery/detection if the successful attack is still ongoing
D. Four (4) hours of discovery/detection if the successful attack is still ongoing
Correct Answer: B
QUESTION 12
Total cost of disruption of an incident is the sum of
A. Tangible and Intangible costs
B. Tangible cost only
C. Intangible cost only
D. Level Two and Level Three incidents cost
Correct Answer: A
QUESTION 13
Which is the incorrect statement about Anti-keyloggers scanners:
A. Detect already installed Keyloggers in victim machines
B. Run in stealthy mode to record victims online activity
C. Software tools
Correct Answer: B
For the full ECCouncil 212-89 exam dumps from Lead4pass 212-89 Dumps pdf or Dumps VCE visit: https://www.leads4pass.com/212-89.html (Q&As: 163 dumps)
ps.
Get free ECCouncil 212-89 dumps PDF online: https://drive.google.com/file/d/1amabCYp99mLRwvzMQa2Tc94975BMqd9s/
