Download ECCouncil.212-89.PracticeTest.2019-10-10.74q.tqb
| Vendor: | ECCouncil |
| Exam Code: | 212-89 |
| Exam Name: | EC-Council Certified Incident Handler |
| Date: | Oct 10, 2019 |
| File Size: | 250 KB |
Demo Questions
Question 1
Multiple component incidents consist of a combination of two or more attacks in a system. Which of the following is not a multiple component incident?
- An insider intentionally deleting files from a workstation
- An attacker redirecting user to a malicious website and infects his system with Trojan
- An attacker infecting a machine to launch a DDoS attack
- An attacker using email with malicious code to infect internal workstation
Correct answer: A
Question 2
Computer Forensics is the branch of forensic science in which legal evidence is found in any computer or any digital media device. Of the following, who is responsible for examining the evidence acquired and separating the useful evidence?
- Evidence Supervisor
- Evidence Documenter
- Evidence Manager
- Evidence Examiner/ Investigator
Correct answer: D
Explanation:
Question 3
The network perimeter should be configured in such a way that it denies all incoming and outgoing traffic/ services that are not required. Which service listed below, if blocked, can help in preventing Denial of Service attack?
- SAM service
- POP3 service
- SMTP service
- Echo service
Correct answer: D
