Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. EC-Council
  5. 312-39

EC-Council 312-39 Exam Questions
Certified SOC Analyst (Page 2 )

Updated On: 18-Apr-2026
Page 2 of 21
PDF with 100 Questions

Bonney's system has been compromised by a gruesome malware.
What is the primary step that is advisable to Bonney in order to contain the malware incident from spreading?

  1. Complaint to police in a formal way regarding the incident
  2. Turn off the infected machine
  3. Leave it to the network administrators to handle
  4. Call the legal department in the organization and inform about the incident

Answer(s): B



According to the forensics investigation process, what is the next step carried out right after collecting the evidence?

  1. Create a Chain of Custody Document
  2. Send it to the nearby police station
  3. Set a Forensic lab
  4. Call Organizational Disciplinary Team

Answer(s): A



Which one of the following is the correct flow for Setting Up a Computer Forensics Lab?

  1. Planning and budgeting –> Physical location and structural design considerations –> Work area considerations –> Human resource considerations –> Physical security recommendations –> Forensics lab licensing
  2. Planning and budgeting –> Physical location and structural design considerations–> Forensics lab licensing –> Human resource considerations –> Work area considerations –> Physical security recommendations
  3. Planning and budgeting –> Forensics lab licensing –> Physical location and structural design considerations –> Work area considerations –> Physical security recommendations –> Human resource considerations
  4. Planning and budgeting –> Physical location and structural design considerations –> Forensics lab licensing –>Work area considerations –> Human resource considerations –> Physical security recommendations

Answer(s): A


Reference:

https://info-savvy.com/setting-up-a-computer-forensics-lab/



Which of the following directory will contain logs related to printer access?

  1. /var/log/cups/Printer_log file
  2. /var/log/cups/access_log file
  3. /var/log/cups/accesslog file
  4. /var/log/cups/Printeraccess_log file

Answer(s): A



Which of the following command is used to enable logging in iptables?

  1. $ iptables -B INPUT -j LOG
  2. $ iptables -A OUTPUT -j LOG
  3. $ iptables -A INPUT -j LOG
  4. $ iptables -B OUTPUT -j LOG

Answer(s): B


Reference:

https://tecadmin.net/enable-logging-in-iptables-on-linux/



Viewing page 2 of 21
Viewing questions 6 - 10 out of 100 questions



Post your Comments and Discuss EC-Council 312-39 exam dumps with other Community members:

312-39 Exam Discussions & Posts

AI Tutor AI Tutor 👋 I’m here to help!