Free 212-89 Exam Braindumps
EC-Council Certified Incident Handler Questions 86–90 (page: 19)

Richard is analyzing a corporate network. After an alert in the network's IPS, he identified that all the servers are sending huge amounts of traffic to the website abc.xyz.
What type of information security attack vectors have affected the network?

You are talking to a colleague who is deciding what information they should include in their organization's logs to help with security auditing.
Which of the following items should you tell them to NOT log?

An insider threat response plan helps an organization minimize the damage caused by malicious insiders. One of the approaches to mitigate these threats is setting up controls from the human resources department.
Which of the following guidelines can the human resources department use?

A self-replicating virus does not alter files but resides in active memory and duplicates itself. It takes advantage of file or information transport features on the system to travel independently.
What is this type of object called?

Jacob is an employee at a firm called Dolphin Investment.
While he was on duty, he identified that his computer was facing some problems, and he wanted to convey the issue to the concerned authority in his organization. However, this organization currently does not have a ticketing system to address such types of issues. In the above scenario, which of the following ticketing systems can be employed by Dolphin Investment to allow Jacob to inform the concerned team about the incident?