Which of the following is a volatile evidence collecting tool?
Answer(s): D
Sam, an employee of a multinational company, sends emails to third-party organizations with a spoofed email address of his organization. How can you categorize this type of incident?
Answer(s): A
Your company sells SaaS, and your company itself is hosted in the cloud (using it as a PaaS). In case of a malware incident in your customer's database, who is responsible for eradicating the malicious software?
Answer(s): C
Your manager hands you several Items of digital evidence and asks you to investigate them in the order of volatility. Which of the following is the MOST volatile?
Which of the following is the ECIH phase that involves removing or eliminating the root cause of an incident and closing all attack vectors to prevent similar incidents in the future?
https://blog.rsisecurity.com/what-is-the-eradication-phase-of-incident-response/
Post your Comments and Discuss EC-Council 212-89 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 212-89 content, but please register or login to continue.