Free 212-89 Exam Braindumps
EC-Council Certified Incident Handler Questions 76–80 (page: 17)

Updated On: 10-Feb-2026

Which of the following has been used to evade IDS and IPS?

  1. HTTP
  2. Fragmentation
  3. TNP
  4. SNMP

Answer(s): B



Alexis works as an incident responder at XYZ organization. She was asked to identify and attribute the actors behind an attack that occurred recently. For this purpose, she is performing a type of threat attribution that deals with the identification of a specific person, society, or country sponsoring a well-planned and executed intrusion or attack on its target.
Which of the following types of threat attributions is Alexis performing?

  1. Nation state attribution
  2. Intrusion-set attribution
  3. Campaign attribution
  4. True attribution

Answer(s): A



James is working as an incident responder at CyberSol Inc. The management instructed James to investigate a cybersecurity incident that recently happened in the company. As a part of the investigation process. James started collecting volatile Information from a system running on Windows operating system.

Which of the following commands helps James in determining all the executable files for running processes?

  1. top
  2. netstat -ab
  3. doskey/history
  4. date /t & time /t

Answer(s): C



Which of the following terms refers to the personnel that the incident handling and response (IH&R) team must contact to report the incident and obtain the necessary permissions?

  1. Criminal referral
  2. Civil litigation
  3. Ticketing
  4. Point of contact

Answer(s): C



Which of the following is a technique used by attackers to make a message difficult to understand through the use of ambiguous language?

  1. Steganography
  2. Obfuscation
  3. Encryption
  4. Spoofing

Answer(s): C



Viewing page 17 of 53
Viewing questions 81 - 85 out of 394 questions


Post your Comments and Discuss EC-Council 212-89 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!