Download Latest 212-89 Dumps with Authentic Real Exam QA’s [Q22-Q41]

NEW QUESTION 22
Which of the following tools helps incident handlers to view the filesystem, retrieve deleted data, perform timeline analysis, web art facts, etc., during an incident response process?

NEW QUESTION 23
Which of the following information security personnel handles incidents from management and technical point of view?

NEW QUESTION 24
They type of attack that prevents the authorized users to access networks, systems, or applications by
exhausting the network resources and sending illegal requests to an application is known as:

NEW QUESTION 25
John is a professional hacker who is performing an attack on the target organization where he tries to redirect the connection between the IP address and its target server such that when the users type in the Internet address, it redirects them to a rogue website that resembles the original website. He tries this attack using cache poisoning technique. Identify the type of attack John is performing on the target organization.

NEW QUESTION 26
Chandler is a professional hacker who is targeting Technote organization. He wants to obtain important organizational information that is being transmitted between different hierarchies. In the process, he is sniffing the data packets transmitted through the network and then analyzing them to gather packet details such as network, ports, protocols, devices, issues in network transmission, and other network specifications. Which of the following tools Chandler must employ to perform packet analysis?

NEW QUESTION 27
Which of the following is defined as the identification of the boundaries of an IT system along with the resources and information that constitute the system?

NEW QUESTION 28
Frederick is in the eradication process in one of the incidents he is handing.
Which of the following is NOT an eradication process?

NEW QUESTION 29
Multiple component incidents consist of a combination of two or more attacks in a system.
Which of the following is not a multiple component incident?

NEW QUESTION 30
An organization’s customers are experiencing either slower network communication or unavailability of services. In addition, network administrators are receiving alerts from security tools such as IDS/IPS and firewalls about a possible DoS/DDoS attack. In result, the organization requests the incident handling and response (IH&R) team further investigates the incident. The IH&R team decides to use manual techniques to detect DoS/DDoS attack.
Which of the following commands helps the IH&R team to manually detect DoS/DDoS attack?

NEW QUESTION 31
Which of the following is not a best practice to eliminate the possibility of insider attacks?

NEW QUESTION 32
An attacker uncovered websites a target individual was frequently Suring. The attacker then tested those particular websites to identify possible vulnerabilities. After detecting vulnerabilities within a website, the attacker started injecting malicious script/code into the web application that would redirect the webpage and download the malware on to the victim’s machine. After infecting the vulnerable web application, the attacker waited for the victim to access the infected web application. Identify the type of attack performed by the attacker.

NEW QUESTION 33
An adversary attacks the information resources to gain undue advantage is called:

NEW QUESTION 34
identify the Sarbanes-Oxley Act (SOX) Title, which consists of only one section, that includes measures designed to help restore investor confidence in the reporting of securities analysts.

NEW QUESTION 35
A computer forensic investigator must perform a proper investigation to protect digital evidence. During the investigation, an investigator needs to process large amounts of data using a combination of automated and manual methods. Identify the computer forensic process involved:

NEW QUESTION 36
The Linux command used to make binary copies of computer media and as a disk imaging tool if given a raw disk device as its input is:

NEW QUESTION 37
James has been appointed as an incident handling and response (IH&R) team lead and he was assigned to build an IH&R plan along with his own team in the company.
Identify the IH&R process step James is currently working on.

NEW QUESTION 38
In which of the following phases of incident handling and response (IH&R) process the identified security incidents are analyzed, validated, categorized, and prioritized?

NEW QUESTION 39
The process of rebuilding and restoring the computer systems affected by an incident to normal operational
stage including all the processes, policies and tools is known as:

NEW QUESTION 40
The main difference between viruses and worms is:

NEW QUESTION 41
Francis is an incident handler and security expert. He works at MorisonTech Solutions based in Sydney, Australia. He was assigned a task to detect phishing/spam mails for the client organization.
Which of the following tools can assist Francis to perform the required task?