EC-COUNCIL EC-COUNCIL Certifications 212-89 Questions & Answers

• Question 81:

  Incident response team must adhere to the following: A. Stay calm and document everything

  B. Assess the situation

  C. Notify appropriate personnel

  D. All the above

  Correct Answer: D

• Question 82:

  What is the best staffing model for an incident response team if current employees' expertise is very low?

  A. Fully outsourced

  B. Partially outsourced

  C. Fully insourced

  D. All the above

  Correct Answer: A

• Question 83:

  Preventing the incident from spreading and limiting the scope of the incident is known as:

  A. Incident Eradication

  B. Incident Protection

  C. Incident Containment

  D. Incident Classification

  Correct Answer: C

• Question 84:

  Performing Vulnerability Assessment is an example of a:

  A. Incident Response

  B. Incident Handling

  C. Pre-Incident Preparation

  D. Post Incident Management

  Correct Answer: C

• Question 85:

  The correct sequence of Incident Response and Handling is:

  A. Incident Identification, recording, initial response, communication and containment

  B. Incident Identification, initial response, communication, recording and containment

  C. Incident Identification, communication, recording, initial response and containment

  D. Incident Identification, recording, initial response, containment and communication

  Correct Answer: A

• Question 86:

  Which of the following is a risk assessment tool:

  A. Nessus

  B. Wireshark

  C. CRAMM

  D. Nmap

  Correct Answer: C

• Question 87:

  In NIST risk assessment/ methodology; the process of identifying the boundaries of an IT system along with the resources and information that constitute the system is known as:

  A. Asset Identification

  B. System characterization

  C. Asset valuation

  D. System classification

  Correct Answer: B

• Question 88:

  What is correct about Quantitative Risk Analysis:

  A. It is Subjective but faster than Qualitative Risk Analysis

  B. Easily automated

  C. Better than Qualitative Risk Analysis

  D. Uses levels and descriptive expressions

  Correct Answer: B

• Question 89:

  Adam calculated the total cost of a control to protect 10,000 $ worth of data as 20,000 $. What do you advise Adam to do?

  A. Apply the control

  B. Not to apply the control

  C. Use qualitative risk assessment

  D. Use semi-qualitative risk assessment instead

  Correct Answer: B

• Question 90:

  The left over risk after implementing a control is called:

  A. Residual risk

  B. Unaccepted risk

  C. Low risk

  D. Critical risk

  Correct Answer: A