Valid ECIH Certification 212-89 Dumps Ensure Your Passing [Q41-Q64]

NEW QUESTION 41
The state of incident response preparedness that enables an organization to maximize its potential to use digital evidence while minimizing the cost of an investigation is called:

NEW QUESTION 42
Which of the following service(s) is provided by the CSIRT:

NEW QUESTION 43
The largest number of cyber-attacks are conducted by:

NEW QUESTION 44
The free utility which quickly scans Systems running Windows OS to find settings that may have been changed by spyware, malware, or other unwanted programs is called:

NEW QUESTION 45
An audit trail policy collects all audit trails such as series of records of computer events, about an operating
system, application or user activities. Which of the following statements is NOT true for an audit trail policy:

NEW QUESTION 46
Business continuity is defined as the ability of an organization to continue to function even after a disastrous
event, accomplished through the deployment of redundant hardware and software, the use of fault tolerant
systems, as well as a solid backup and recovery strategy. Identify the plan which is mandatory part of a
business continuity plan?

NEW QUESTION 47
Multiple component incidents consist of a combination of two or more attacks in a system. Which of the following is not a multiple component incident?

NEW QUESTION 48
Agencies do NOT report an information security incident is because of:

NEW QUESTION 49
A software application in which advertising banners are displayed while the program is running that delivers
ads to display pop-up windows or bars that appears on a computer screen or browser is called:

NEW QUESTION 50
Incidents are reported in order to:

NEW QUESTION 51
The steps followed to recover computer systems after an incident are:

NEW QUESTION 52
The left over risk after implementing a control is called:

NEW QUESTION 53
The ability of an agency to continue to function even after a disastrous event, accomplished through the
deployment of redundant hardware and software, the use of fault tolerant systems, as well as a solid backup
and recovery strategy is known as:

NEW QUESTION 54
A living high level document that states in writing a requirement and directions on how an agency plans to protect its information technology assets is called:

NEW QUESTION 55
The open source TCP/IP network intrusion prevention and detection system (IDS/IPS), uses a rule-driven language, performs real-time traffic analysis and packet logging is known as:

NEW QUESTION 56
Quantitative risk is the numerical determination of the probability of an adverse event and the extent of the losses due to the event. Quantitative risk is calculated as:

NEW QUESTION 57
An incident is analyzed for its nature, intensity and its effects on the network and systems. Which stage of the incident response and handling process involves auditing the system and network log files?

NEW QUESTION 58
The data on the affected system must be backed up so that it can be retrieved if it is damaged during incident response. The system backup can also be used for further investigations of the incident. Identify the stage of the incident response and handling process in which complete backup of the infected system is carried out?

NEW QUESTION 59
An estimation of the expected losses after an incident helps organization in prioritizing and formulating their incident response. The cost of an incident can be categorized as a tangible and intangible cost. Identify the tangible cost associated with virus outbreak?

NEW QUESTION 60
The program that helps to train people to be better prepared to respond to emergency situations in their communities is known as:

NEW QUESTION 61
The flow chart gives a view of different roles played by the different personnel of CSIRT. Identify the incident response personnel denoted by A, B, C, D, E, F and G.

NEW QUESTION 62
What command does a Digital Forensic Examiner use to display the list of all IP addresses and their associated MAC addresses on a victim computer to identify the machines that were communicating with it:

NEW QUESTION 63
Which of the following is a risk assessment tool:

NEW QUESTION 64
A computer forensic investigator must perform a proper investigation to protect digital evidence. During the
investigation, an investigator needs to process large amounts of data using a combination of automated and
manual methods. Identify the computer forensic process involved: