Free 212-89 Exam Braindumps
EC-Council Certified Incident Handler Questions 101–105 (page: 22)

Updated On: 10-Feb-2026

A user downloaded what appears to be genuine software. Unknown to her, when she installed the application, it executed code that provided an unauthorized remote attacker access to her computer.
What type of malicious threat displays this characteristic?

  1. Spyware
  2. Backdoor
  3. Trojan
  4. Virus

Answer(s): C



Which of the following is an attack that attempts to prevent the use of systems, networks, or applications by the intended users?

  1. Malicious code or insider threat attack
  2. Denial of service (DoS) attack
  3. Unauthorized access
  4. Fraud and theft

Answer(s): B



Which of the following is a common tool used to help detect malicious internal or compromised actors?

  1. SOC2 compliance report
  2. Syslog configuration
  3. Log forwarding
  4. User behavior analytics

Answer(s): D



Bran is an incident handler who is assessing the network of the organization. He wants to detect ping sweep attempts on the network using Wireshark.
Which of the following Wireshark filters would Bran use to accomplish this task?

  1. icmp.type==8
  2. icmp.ident
  3. icmp.seq
  4. icmp.redir_gw

Answer(s): A



Francis is an incident handler and security expert. He works at MorisonTech Solutions based in Sydney, Australia. He was assigned a task to detect phishing/spam mails for the client organization.

Which of the following tools can assist Francis to perform the required task?

  1. Nessus
  2. BTCrack
  3. Netcraft
  4. Cain and Abel

Answer(s): C



Viewing page 22 of 53
Viewing questions 106 - 110 out of 394 questions


Post your Comments and Discuss EC-Council 212-89 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!