Free 212-89 Exam Braindumps
EC-Council Certified Incident Handler Questions 131–135 (page: 28)

The security team at a multinational company has noticed a few unusual activities on their web applications and suspects potential SQL injection and XSS attacks. The incident handler is tasked with identifying and analyzing these incidents.
Which of the following options would best enable the incident handler to detect and analyze the suspected attacks in this scenario?

During a web application security incident, the incident response team discovers that a hacker has gained access to a server hosting a critical web application. The hacker has also installed malware that has enabled them to steal sensitive data from the server.
What is the best course of action for the incident response team during the containment phase?

After a significant data breach at a large retail company's cloud-based Point of Sale (POS) system, you are tasked as an EC-Council Certified Incident Handler to formulate a strategy for future incidents. One of the main challenges you faced during the response was the ambiguity over the division of responsibility between the company and the cloud service provider. To mitigate this issue, what should be your primary focus for future incident handling?

During an email security incident, the Incident Handler & Response (IH&R) team in a certain organization decided to use Pretty Good Privacy (PGP) protocols via the Gpg4win tool to secure email communications.
While creating a backup of keys, one of the IH&R team members forgot to make a note of the location of the backup files.
What could be the potential impact of this mistake?

While handling and responding to a potential web application security incident, you are required to conduct a vulnerability scan of your website. As an EC-Council Certified Incident Handler(ECIH), which of the following steps is NOT part of the process of performing web application vulnerability scanning using Acunetix Web Vulnerability Scanner(WVS)?