Free 212-89 Exam Braindumps
EC-Council Certified Incident Handler Questions 96–100 (page: 21)

Updated On: 10-Feb-2026

Which of the following types of digital evidence is temporarily stored in a digital device that requires constant power supply and is deleted if the power supply is interrupted?

  1. Slack space
  2. Process memory
  3. Event logs
  4. Swap file

Answer(s): B



ZYX company experienced a DoS/DDoS attack on their network. Upon investigating the incident, they concluded that the attack is an application-layer attack.
Which of the following attacks did the attacker use?

  1. Ping of death
  2. Slowloris attack
  3. SYN food attack
  4. UDP food attack

Answer(s): C



Which of the following options describes common characteristics of phishing emails?

  1. Written in French
  2. No BCC fields
  3. Sent from friends or colleagues
  4. Urgency, threatening, or promising subject lines

Answer(s): D



Investigator Ian gives you a drive image to investigate.
What type of analysis are you performing?

  1. Dynamic
  2. Static
  3. Live
  4. Real-time

Answer(s): D



Ross is an incident manager (IM) at an organization, and his team provides support to all users in the organization who are affected by threats or attacks. David, who is the organization's internal auditor, is also part of Ross's incident response team.
Which of the following is David's responsibility?

  1. Coordinate incident containment activities with the information security officer (ISO).
  2. Configure information security controls.
  3. Perform the necessary action to block the network traffic from the suspected intruder.
  4. Identify and report security loopholes to the management for necessary action.

Answer(s): C



Viewing page 21 of 53
Viewing questions 101 - 105 out of 394 questions


Post your Comments and Discuss EC-Council 212-89 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!