Free 212-89 Exam Braindumps
EC-Council Certified Incident Handler Questions 61–65 (page: 14)

Updated On: 10-Feb-2026

An attack on a network is BEST blocked using which of the following?

  1. IPS device Inline
  2. Load balancer
  3. Web proxy
  4. HIPS

Answer(s): A



Which of the following risk management processes identifies the risks, estimates the impact, and determines sources to recommend proper mitigation measures?

  1. Risk avoidance
  2. Risk mitigation
  3. Risk assessment
  4. Risk assumption

Answer(s): C



Nervous Nat often sends emails with screenshots of what he thinks are serious incidents, but they always turn out to be false positives. Today, he sends another screenshot, suspecting a nation state attack. As usual, you go through your list of questions, check your resources for information to determine whether the screenshot shows a real attack, and determine the condition of your network.
Which step of IR did you just perform?

  1. Preparation
  2. Recovery
  3. Detection and analysis (or identification)
  4. Remediation

Answer(s): C



Miko was hired as an incident handler in XYZ company. His first task was to Identify the PING sweep attempts inside the network. For this purpose, he used Wireshark to analyze the traffic.
What filter did he use to identify ICMP ping sweep attempts?

  1. tcp.type== icmp
  2. udp.type == 7
  3. icmp.type == 8 or icmp.type == 0
  4. icmp.type == icmp

Answer(s): C



Francis received a spoof email asking for his bank information. He decided to use a tool to analyze the email headers.
Which of the following should he use?

  1. MxToolbox
  2. Event Log Analyzer
  3. Email Checker
  4. PoliteMail

Answer(s): D



Viewing page 14 of 53
Viewing questions 66 - 70 out of 394 questions


Post your Comments and Discuss EC-Council 212-89 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!