EC-COUNCIL EC-COUNCIL Certifications 212-89 Questions & Answers

• Question 61:

  The very well-known free open source port, OS and service scanner and network discovery utility is called:

  A. Wireshark

  B. Nmap (Network Mapper)

  C. Snort

  D. SAINT

  Correct Answer: B

• Question 62:

  To respond to DDoS attacks; one of the following strategies can be used:

  A. Using additional capacity to absorb attack

  B. Identifying none critical services and stopping them

  C. Shut down some services until the attack has subsided

  D. All the above

  Correct Answer: D

• Question 63:

  Installing a password cracking tool, downloading pornography material, sending emails to colleagues which irritates them and hosting unauthorized websites on the company's computer are considered:

  A. Network based attacks

  B. Unauthorized access attacks

  C. Malware attacks

  D. Inappropriate usage incidents

  Correct Answer: D

• Question 64:

  Changing the web server contents, Accessing the workstation using a false ID and Copying sensitive data without authorization are examples of:

  A. DDoS attacks

  B. Unauthorized access attacks

  C. Malware attacks

  D. Social Engineering attacks

  Correct Answer: B

• Question 65:

  The free, open source, TCP/IP protocol analyzer, sniffer and packet capturing utility standard across many industries and educational institutions is known as:

  A. Snort

  B. Wireshark

  C. Cain and Able

  D. nmap

  Correct Answer: B

• Question 66:

  An active vulnerability scanner featuring high speed discovery, configuration auditing, asset profiling, sensitive data discovery, and vulnerability analysis is called:

  A. Nessus

  B. CyberCop

  C. EtherApe

  D. nmap

  Correct Answer: A

• Question 67:

  Common name(s) for CSIRT is(are)

  A. Incident Handling Team (IHT)

  B. Incident Response Team (IRT)

  C. Security Incident Response Team (SIRT)

  D. All the above

  Correct Answer: D

• Question 68:

  CSIRT can be implemented at:

  A. Internal enterprise level

  B. National, government and military level

  C. Vendor level

  D. All the above

  Correct Answer: D

• Question 69:

  The typical correct sequence of activities used by CSIRT when handling a case is:

  A. Log, inform, maintain contacts, release information, follow up and reporting

  B. Log, inform, release information, maintain contacts, follow up and reporting

  C. Log, maintain contacts, inform, release information, follow up and reporting

  D. Log, maintain contacts, release information, inform, follow up and reporting

  Correct Answer: A

• Question 70:

  The program that helps to train people to be better prepared to respond to emergency situations in their communities is known as:

  A. Community Emergency Response Team (CERT)

  B. Incident Response Team (IRT)

  C. Security Incident Response Team (SIRT)

  D. All the above

  Correct Answer: A