Free Access EC-COUNCIL.212-89.v2022-01-31.q80 Practice Test (Page 6)

Question 21

Electronic evidence may reside in the following:

A.Data Files

B.Backup tapes

C.All the above

D.Other media sources

Question 22

The flow chart gives a view of different roles played by the different personnel of CSIRT. Identify the incident
response personnel denoted by A, B, C, D, E, F and G.

A.A- Incident Coordinator, B-Incident Analyst, C- Public Relations, D-Administrator, E- Human Resource, F-
Constituency, G-Incident Manager

B.A- Incident Coordinator, B- Constituency, C-Administrator, D-Incident Manager, E- Human Resource, F-
Incident Analyst, G-Public relations

C.A-Incident Analyst, B- Incident Coordinator, C- Public Relations, D-Administrator, E- Human Resource, F-
Constituency, G-Incident Manager

D.A- Incident Manager, B-Incident Analyst, C- Public Relations, D-Administrator, E- Human Resource, F-
Constituency, G-Incident Coordinator

Question 23

A software application in which advertising banners are displayed while the program is running that delivers ads to display pop-up windows or bars that appears on a computer screen or browser is called:

A.Trojan

B.RootKit

C.Virus

D.Worm

E.adware (spelled all lower case)

Question 24

The correct sequence of incident management process is:

A.Prepare, detect, protect, triage and respond

B.Prepare, protect, triage, detect and respond

C.Prepare, protect, detect, respond and triage

D.Prepare, protect, detect, triage and respond

Question 25

An audit trail policy collects all audit trails such as series of records of computer events, about an operating
system, application or user activities. Which of the following statements is NOT true for an audit trail policy:

A.It helps calculating intangible losses to the organization due to incident

B.It helps in compliance to various regulatory laws, rules,and guidelines

C.It helps tracking individual actions and allows users to be personally accountable for their actions

D.It helps in reconstructing the events after a problem has occurred

Other Version: 3108EC-COUNCIL.212-89.v2025-07-10.q180; 4931EC-COUNCIL.212-89.v2024-10-25.q169; 2306EC-COUNCIL.212-89.v2024-04-20.q127; 1694EC-COUNCIL.212-89.v2022-12-15.q119; 1500EC-COUNCIL.212-89.v2022-06-28.q74; 88EC-COUNCIL.Pass4surecert.212-89.v2021-09-13.by.hamiltion.74q.pdf

Latest Upload: 109EMC.D-VXR-DS-00.v2025-12-24.q43; 121Splunk.SPLK-5001.v2025-12-24.q37; 123Huawei.H19-308-ENU.v2025-12-24.q74; 107APMG-International.AgilePM-Foundation.v2025-12-24.q74; 136SAP.C-C4H62-2408.v2025-12-24.q81; 111ASHRAE.HFDP.v2025-12-24.q39; 113ISQI.CTFL-UT.v2025-12-23.q13; 123ARDMS.SPI.v2025-12-23.q102; 123Microsoft.SC-300.v2025-12-23.q333; 120PaloAltoNetworks.PSE-Prisma-Pro-24.v2025-12-23.q39

Question 21

Question 22

Question 23

Question 24

Question 25

Download PDF File