Download EC-Council Certified Incident Handler.212-89.TestInside.2019-09-30.97q.vcex

Vendor: ECCouncil
Exam Code: 212-89
Exam Name: EC-Council Certified Incident Handler
Date: Sep 30, 2019
File Size: 206 KB
Downloads: 2
Download Exam

How to open VCEX files?

Files with VCEX extension can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase
Coupon: EXAMFILESCOM

Discount: 20%

ProfExam Simulator ProfExam Simulator ProfExam Simulator ProfExam Simulator ProfExam Simulator

Demo Questions

Question 1
A distributed Denial of Service (DDoS) attack is a more common type of DoS Attack, where a single system is targeted by a large number of infected machines over the Internet. In a DDoS attack, attackers first infect multiple systems which are known as:
  1. Trojans
  2. Zombies
  3. Spyware
  4. Worms
Correct answer: B
Question 2
An organization faced an information security incident where a disgruntled employee passed sensitive access control information to a competitor. The organization’s incident response manager, upon investigation, found that the incident must be handled within a few hours on the same day to maintain business continuity and market competitiveness. 
How would you categorize such information security incident?
  1. High level incident
  2. Middle level incident
  3. Ultra-High level incident
  4. Low level incident
Correct answer: A
Question 3
Business continuity is defined as the ability of an organization to continue to function even after a disastrous event, accomplished through the deployment of redundant hardware and software, the use of fault tolerant systems, as well as a solid backup and recovery strategy. Identify the plan which is mandatory part of a business continuity plan?
  1. Forensics Procedure Plan
  2. Business Recovery Plan
  3. Sales and Marketing plan
  4. New business strategy plan
Correct answer: B
Question 4
The flow chart gives a view of different roles played by the different personnel of CSIRT. Identify the incident response personnel denoted by A, B, C, D, E, F and G. 
  
  1. A-Incident Analyst, B- Incident Coordinator, C- Public Relations, D-Administrator, E- Human Resource, F-Constituency, G-Incident Manager
  2. A- Incident Coordinator, B-Incident Analyst, C- Public Relations, D-Administrator, E- Human Resource, F-Constituency, G-Incident Manager
  3. A- Incident Coordinator, B- Constituency, C-Administrator, D-Incident Manager, E- Human Resource, F-Incident Analyst, G-Public relations
  4. A- Incident Manager, B-Incident Analyst, C- Public Relations, D-Administrator, E- Human Resource, F-Constituency, G-Incident Coordinator
Correct answer: C
Question 5
Which of the following is an appropriate flow of the incident recovery steps?
  1. System Operation-System Restoration-System Validation-System Monitoring
  2. System Validation-System Operation-System Restoration-System Monitoring
  3. System Restoration-System Monitoring-System Validation-System Operations
  4. System Restoration-System Validation-System Operations-System Monitoring
Correct answer: D
Question 6
Identify the network security incident where intended authorized users are prevented from using system, network, or applications by flooding the network with high volume of traffic that consumes all existing network resources.
  1. URL Manipulation
  2. XSS Attack
  3. SQL Injection
  4. Denial of Service Attack
Correct answer: D
Question 7
Incident handling and response steps help you to detect, identify, respond and manage an incident. Which of the following steps focus on limiting the scope and extent of an incident?
  1. Eradication
  2. Containment
  3. Identification
  4. Data collection
Correct answer: B
Question 8
Quantitative risk is the numerical determination of the probability of an adverse event and the extent of the losses due to the event. Quantitative risk is calculated as:
  1. (Probability of Loss) X (Loss)
  2. (Loss) / (Probability of Loss)
  3. (Probability of Loss) / (Loss)
  4. Significant Risks X Probability of Loss X Loss
Correct answer: A
Question 9
An incident recovery plan is a statement of actions that should be taken before, during or after an incident. Identify which of the following is NOT an objective of the incident recovery plan?
  1. Creating new business processes to maintain profitability after incident
  2. Providing a standard for testing the recovery plan
  3. Avoiding the legal liabilities arising due to incident
  4. Providing assurance that systems are reliable
Correct answer: A
Question 10
An audit trail policy collects all audit trails such as series of records of computer events, about an operating system, application or user activities. 
Which of the following statements is NOT true for an audit trail policy:
  1. It helps calculating intangible losses to the organization due to incident
  2. It helps tracking individual actions and allows users to be personally accountable for their actions
  3. It helps in compliance to various regulatory laws, rules,and guidelines
  4. It helps in reconstructing the events after a problem has occurred
Correct answer: A
CONNECT US
HOW TO OPEN VCE FILES

Use VCE Exam Simulator to open VCE files
Avanaset

HOW TO OPEN VCEX AND EXAM FILES

Use ProfExam Simulator to open VCEX and EXAM files
ProfExam Screen

ProfExam
ProfExam at a 20% markdown

You have the opportunity to purchase ProfExam at a 20% reduced price

Get Now!