EC-COUNCIL EC-COUNCIL Certifications 212-89 Questions & Answers

• Question 91:

  A payroll system has a vulnerability that cannot be exploited by current technology. Which of the following is correct about this scenario:

  A. The risk must be urgently mitigated

  B. The risk must be transferred immediately

  C. The risk is not present at this time

  D. The risk is accepted

  Correct Answer: C

• Question 92:

  Overall Likelihood rating of a Threat to Exploit a Vulnerability is driven by :

  A. Threat-source motivation and capability

  B. Nature of the vulnerability

  C. Existence and effectiveness of the current controls

  D. All the above

  Correct Answer: D

• Question 93:

  If the loss anticipated is greater than the agreed upon threshold; the organization will:

  A. Accept the risk

  B. Mitigate the risk

  C. Accept the risk but after management approval

  D. Do nothing

  Correct Answer: B

• Question 94:

  Which of the following can be considered synonymous:

  A. Hazard and Threat

  B. Threat and Threat Agent

  C. Precaution and countermeasure

  D. Vulnerability and Danger

  Correct Answer: A

• Question 95:

  Incident prioritization must be based on:

  A. Potential impact

  B. Current damage

  C. Criticality of affected systems

  D. All the above

  Correct Answer: D

• Question 96:

  An information security incident is

  A. Any real or suspected adverse event in relation to the security of computer systems or networks

  B. Any event that disrupts normal today's business functions

  C. Any event that breaches the availability of information assets

  D. All of the above

  Correct Answer: D

• Question 97:

  Total cost of disruption of an incident is the sum of

  A. Tangible and Intangible costs

  B. Tangible cost only

  C. Intangible cost only

  D. Level Two and Level Three incidents cost

  Correct Answer: A

• Question 98:

  The sign of incident that may happen in the future is called:

  A. A Precursor

  B. An Indication

  C. A Proactive

  D. A Reactive

  Correct Answer: A

• Question 99:

  Incidents such as DDoS that should be handled immediately may be considered as:

  A. Level One incident

  B. Level Two incident

  C. Level Three incident

  D. Level Four incident

  Correct Answer: C

• Question 100:

  The largest number of cyber-attacks are conducted by: A. Insiders

  B. Outsiders

  C. Business partners

  D. Suppliers

  Correct Answer: B