Latest EC-COUNCIL 212-89 First Attempt, Exam real Dumps Updated [Sep-2021]
Get the superior quality 212-89 Dumps Questions from ValidTorrent. Nobody can stop you from getting to your dreams now. Your bright future is just a click away!
NEW QUESTION 80
According to the Evidence Preservation policy, a forensic investigator should make at least ..................... image copies of the digital evidence.
- A. One image copy
- B. Three image copies
- C. Four image copies
- D. Two image copies
Answer: D
NEW QUESTION 81
The policy that defines which set of events needs to be logged in order to capture and review the important data in a timely manner is known as:
- A. Audit trail policy
- B. Documentation policy
- C. Logging policy
- D. Evidence Collection policy
Answer: C
NEW QUESTION 82
The USB tool (depicted below) that is connected to male USB Keyboard cable and not detected by anti-spyware tools is most likely called:
- A. Hardware Keylogger
- B. USB adapter
- C. Anti-Keylogger
- D. Software Key Grabber
Answer: A
NEW QUESTION 83
Insiders understand corporate business functions. What is the correct sequence of activities performed by
Insiders to damage company assets:
- A. Install malware, gain privileged access, then activate
- B. Gain privileged access, install malware then activate
- C. Activate malware, gain privileged access then install malware
- D. Gain privileged access, activate and install malware
Answer: B
NEW QUESTION 84
Quantitative risk is the numerical determination of the probability of an adverse event and the extent of the losses due to the event. Quantitative risk is calculated as:
- A. (Probability of Loss) X (Loss)
- B. (Probability of Loss) / (Loss)
- C. Significant Risks X Probability of Loss X Loss
- D. (Loss) / (Probability of Loss)
Answer: A
NEW QUESTION 85
What command does a Digital Forensic Examiner use to display the list of all open ports and the associated IP addresses on a victim computer to identify the established connections on it:
- A. "arp" command
- B. "ifconfig" command
- C. "netstat -an" command
- D. "dd" command
Answer: C
NEW QUESTION 86
To recover, analyze, and preserve computer and related materials in such a way that it can be presented as evidence in a court of law and identify the evidence in short time, estimate the potential impact of the malicious activity on the victim, and assess the intent and identity of the perpetrator is known as:
- A. Computer Forensics
- B. Forensic Readiness
- C. Digital Forensic Examiner
- D. Digital Forensic Analysis
Answer: D
NEW QUESTION 87
An estimation of the expected losses after an incident helps organization in prioritizing and formulating their
incident response. The cost of an incident can be categorized as a tangible and intangible cost. Identify the
tangible cost associated with virus outbreak?
- A. Psychological damage
- B. Damage to corporate reputation
- C. Lost productivity damage
- D. Loss of goodwill
Answer: C
NEW QUESTION 88
Lack of forensic readiness may result in:
- A. System downtime
- B. Data manipulation, deletion, and theft
- C. All the above
- D. Loss of clients thereby damaging the organization's reputation
Answer: C
NEW QUESTION 89
US-CERT and Federal civilian agencies use the reporting timeframe criteria in the federal agency reporting
categorization. What is the timeframe required to report an incident under the CAT 4 Federal Agency category?
- A. Within four (4) hours of discovery/detection if the successful attack is still ongoing and agency is unable to
successfully mitigate activity - B. Monthly
- C. Weekly
- D. Within two (2) hours of discovery/detection
Answer: C
NEW QUESTION 90
Keyloggers do NOT:
- A. Secretly records URLs visited in browser, keystrokes, chat conversations, ...etc
- B. Run in the background
- C. Alter system files
- D. Send log file to attacker's email or upload it to an ftp server
Answer: C
NEW QUESTION 91
Insiders understand corporate business functions. What is the correct sequence of activities performed by Insiders to damage company assets:
- A. Install malware, gain privileged access, then activate
- B. Gain privileged access, install malware then activate
- C. Activate malware, gain privileged access then install malware
- D. Gain privileged access, activate and install malware
Answer: B
NEW QUESTION 92
The person who offers his formal opinion as a testimony about a computer crime incident in the court of law is known as:
- A. Incident Analyzer
- B. Incident Responder
- C. Evidence Documenter
- D. Expert Witness
Answer: D
NEW QUESTION 93
A Malicious code attack using emails is considered as:
- A. Multiple component attack
- B. Malware based attack
- C. Email attack
- D. Inappropriate usage incident
Answer: A
NEW QUESTION 94
An adversary attacks the information resources to gain undue advantage is called:
- A. Defensive Information Warfare
- B. Conventional Warfare
- C. Electronic Warfare
- D. Offensive Information Warfare
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION 95
......
EC-COUNCIL Practice Test Engine with 212-89 Questions: https://drive.google.com/open?id=1YtsZDYbDtWcwiSC_-MmCNUAVtnW5CjtW
Guaranteed Success with Valid EC-COUNCIL 212-89 Dumps: https://www.validtorrent.com/212-89-valid-exam-torrent.html