[Dec 29, 2023] Pass ECIH Certification 212-89 Exam With 205 Questions [Q113-Q131]

NEW QUESTION 113
SWA Cloud Services added PK las one of their cloud security controls.
What does PKI stand for?

NEW QUESTION 114
The process of rebuilding and restoring the computer systems affected by an incident to normal operational stage including all the processes, policies and tools is known as:

NEW QUESTION 115
Identify the network security incident where intended authorized users are prevented from using system,
network, or applications by flooding the network with high volume of traffic that consumes all existing network
resources.

NEW QUESTION 116
In a DDoS attack, attackers first infect multiple systems, which are then used to attack a particular target directly. Those systems are called:

NEW QUESTION 117
Stanley is an incident handler working for TexaCorp., a United States based organization. With the growing concern of increasing emails from outside the organization, Stanley was asked to take appropriate actions to keep the security of the organization intact. In the process of detecting and containing malicious emails, Stanley was asked to check the validity of the emails received by employees. Identify the tool Stanley can use to accomplish this task.

NEW QUESTION 118
Which of the following GPG 18 and Forensic readiness planning (SPF) principles states that “organizations should adopt a scenario based Forensic Readiness Planning approach that learns from experience gained within the business”?

NEW QUESTION 119
Which of the following is host-based evidence?

NEW QUESTION 120
Multiple component incidents consist of a combination of two or more attacks in a system. Which of the
following is not a multiple component incident?

NEW QUESTION 121
Which of the following best describes an email issued as an attack medium, in which several messages are sent to a mailbox to cause over fi ow?

NEW QUESTION 122
Incidents such as DDoS that should be handled immediately may be considered as:

NEW QUESTION 123
Jason is setting up a computer forensics lab and must perform the following steps:
1. physical location and structural design considerations;
2. planning and budgeting;
3. work area considerations;
4. physical security recommendations;
5. forensic lab licensing;
6. human resource considerations.
Arrange these steps in the order of execution.

NEW QUESTION 124
Francis is an incident handler and security expert. He works at Morison Tech Solutions based in Sydney, Australia. He was assigned a task to detect phishing/spam mails for the client organization.
Which of the following tools can assist Francis to perform the required task?

NEW QUESTION 125
Which of the following incident recovery testing methods works by creating a mock disaster, like fire to identify the reaction of the procedures that are implemented to handle such situations?

NEW QUESTION 126
The correct sequence of Incident Response and Handling is:

NEW QUESTION 127
A distributed Denial of Service (DDoS) attack is a more common type of DoS Attack, where a single system is targeted by a large number of infected machines over the Internet. In a DDoS attack, attackers first infect multiple systems which are known as:

NEW QUESTION 128
In the Control Analysis stage of the NIST’s risk assessment methodology, technical and none technical control
methods are classified into two categories. What are these two control categories?

NEW QUESTION 129
Which of the following is a technique used by attackers to make a message difficult to understand through the use of ambiguous language?

NEW QUESTION 130
Adam calculated the total cost of a control to protect 10,000 $ worth of data as 20,000 $. What do you advise Adam to do?

NEW QUESTION 131
The USB tool (depicted below) that is connected to male USB Keyboard cable and not detected by anti-
spyware tools is most likely called: