Free 212-89 Exam Braindumps
EC-Council Certified Incident Handler Questions 56–60 (page: 13)

Updated On: 10-Feb-2026

Jason is setting up a computer forensics lab and must perform the following steps: 1. physical location and structural design considerations: 2. planning and budgeting; 3. work area considerations: 4. physical security recommendations; 5. forensic lab licensing; 6. human resource considerations. Arrange these steps in the order of execution.

  1. 5 -> 2 ->1 -> 3 -> 4 -> 6
  2. 3 -> 2 -> 1 -> 4 -> 6 -> 5
  3. 2 -> 3 -> 1 -> 4 -> 6 -> 5
  4. 2 -> 1 -> 3 -> 6 -> 4 -> 5

Answer(s): D



Malicious Micky has moved from the delivery stage to the exploitation stage of the kill chain. This malware wants to find and report to the command center any useful services on the system.
Which of the following recon attacks is the MOST LIKELY to provide this information?

  1. Session hijack
  2. Packet sniffing
  3. Port scan
  4. IP range sweep

Answer(s): B



Oscar receives an email from an unknown source containing his domain name oscar.com. Upon checking the link, he found that it contains a malicious URL that redirects to the website evilsite.org.
What type of vulnerability is this?

  1. Botnet
  2. SQL injection
  3. Malware
  4. Unvalidated redirects and forwards

Answer(s): D



You are a systems administrator for a company. You are accessing your file server remotely for maintenance. Suddenly, you are unable to access the server. After contacting others in your department, you find out that they cannot access the file server either. You can ping the file server but not connect to it via RDP. You check the Active Directory Server, and all is well. You check the email server and find that emails are sent and received normally.
What is the most likely issue?

  1. An email service issue
  2. A denial-of-service issue
  3. The file server has shut down
  4. An admin account issue

Answer(s): B



Which of the following is NOT a network forensic tool?

  1. Tcpdump
  2. Wireshark
  3. Capsa Network Analyzer
  4. Advanced NTFS Journaling Parser

Answer(s): D



Viewing page 13 of 53
Viewing questions 61 - 65 out of 394 questions


Post your Comments and Discuss EC-Council 212-89 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!