Free 212-89 Exam Braindumps (page: 5)

Page 4 of 41

An incident recovery plan is a statement of actions that should be taken before, during or after an incident. Identify which of the following is NOT an objective of the incident recovery plan?

  1. Creating new business processes to maintain profitability after incident
  2. Providing a standard for testing the recovery plan
  3. Avoiding the legal liabilities arising due to incident
  4. Providing assurance that systems are reliable

Answer(s): A



Risk is defined as the probability of the occurrence of an incident. Risk formulation generally begins with the likeliness of an event’s occurrence, the harm it may cause and is usually denoted as Risk = ∑(events)X (Probability of occurrence)X?

  1. Magnitude
  2. Probability
  3. Consequences
  4. Significance

Answer(s): A



An audit trail policy collects all audit trails such as series of records of computer events, about an operating system, application or user activities. Which of the following statements is NOT true for an audit trail policy?

  1. It helps calculating intangible losses to the organization due to incident
  2. It helps tracking individual actions and allows users to be personally accountable for their actions
  3. It helps in compliance to various regulatory laws, rules, and guidelines
  4. It helps in reconstructing the events after a problem has occurred

Answer(s): A



Computer forensics is methodical series of techniques and procedures for gathering evidence from computing equipment, various storage devices and or digital media that can be presented in a course of law in a coherent and meaningful format. Which one of the following is an appropriate flow of steps in the computer forensics process?

  1. Examination> Analysis > Preparation > Collection > Reporting
  2. Preparation > Analysis > Collection > Examination > Reporting
  3. Analysis > Preparation > Collection > Reporting > Examination
  4. Preparation > Collection > Examination > Analysis > Reporting

Answer(s): D






Post your Comments and Discuss EC-Council 212-89 exam with other Community members:

212-89 Discussions & Posts