EC-COUNCIL EC-COUNCIL Certifications 212-89 Questions & Answers

• Question 71:

  The role that applies appropriate technology and tries to eradicate and recover from the incident is known as:

  A. Incident Manager

  B. Incident Analyst

  C. Incident Handler

  D. Incident coordinator

  Correct Answer: B

• Question 72:

  CERT members can provide critical support services to first responders such as:

  A. Immediate assistance to victims

  B. Consolidated automated service process management platform

  C. Organizing spontaneous volunteers at a disaster site

  D. A + C

  Correct Answer: D

• Question 73:

  Which of the following service(s) is provided by the CSIRT:

  A. Vulnerability handling

  B. Technology watch

  C. Development of security tools

  D. All the above

  Correct Answer: D

• Question 74:

  The main feature offered by PGP Desktop Email is:

  A. Email service during incidents

  B. End-to-end email communications

  C. End-to-end secure email service

  D. None of the above

  Correct Answer: C

• Question 75:

  Incident Response Plan requires

  A. Financial and Management support

  B. Expert team composition

  C. Resources

  D. All the above

  Correct Answer: D

• Question 76:

  The service organization that provides 24x7 computer security incident response services to any user, company, government agency, or organization is known as:

  A. Computer Security Incident Response Team CSIRT

  B. Security Operations Center SOC

  C. Digital Forensics Examiner

  D. Vulnerability Assessor

  Correct Answer: A

• Question 77:

  Which of the following is a correct statement about incident management, handling and response:

  A. Incident response is on the functions provided by incident handling

  B. Incident handling is on the functions provided by incident response

  C. Triage is one of the services provided by incident response

  D. Incident response is one of the services provided by triage

  Correct Answer: A

• Question 78:

  Which of the following is an incident tracking, reporting and handling tool:

  A. CRAMM

  B. RTIR

  C. NETSTAT

  D. EAR/ Pilar

  Correct Answer: B

• Question 79:

  Removing or eliminating the root cause of the incident is called:

  A. Incident Eradication

  B. Incident Protection

  C. Incident Containment

  D. Incident Classification

  Correct Answer: A

• Question 80:

  The correct sequence of incident management process is:

  A. Prepare, protect, triage, detect and respond

  B. Prepare, protect, detect, triage and respond

  C. Prepare, detect, protect, triage and respond

  D. Prepare, protect, detect, respond and triage

  Correct Answer: B