[Jan-2024] Pass 212-89 Exam in First Attempt Updated 212-89 Exam Questions [Q74-Q95]

NEW QUESTION 74
Jacobi san employee at a firm called Dolphin Investment. While he was on duty, he identified that his computer was facing some problems, and he wanted to convey the issue to the c once med authority in his organization. However, this organization currently does not have a ticketing system to address such types of issues.
In the above scenario, which of the following ticketing systems can be employed by Dolphin Investment to allow Jacob to inform the c once med team about the incident?

NEW QUESTION 75
The left over risk after implementing a control is called:

NEW QUESTION 76
Which is the incorrect statement about Anti-keyloggers scanners:

NEW QUESTION 77
What is the name of the type of malicious software or malware designed to deny access to a computer system or data until money is paid?

NEW QUESTION 78
Which of the following is NOT an image integrity tool?

NEW QUESTION 79
Business continuity is defined as the ability of an organization to continue to function even after a disastrous event, accomplished through the deployment of redundant hardware and software, the use of fault tolerant systems, as well as a solid backup and recovery strategy. Identify the plan which is mandatory part of a business continuity plan?

NEW QUESTION 80
Incident handling and response steps help you to detect, identify, respond and manage an incident. Which of
the following steps focus on limiting the scope and extent of an incident?

NEW QUESTION 81
Shall y, an incident handler, works for a company named Texas Pvt.Ltd.based in Florida. She was asked to work on an incident response plan. As part of the plan, she decided to enhance and improve the security infrastructure of the enterprise. She incorporated a security strategy that allows security professionals to use several protection layers throughout their information system. Owing to multiple-layer protection, this security strategy assists in preventing direct attacks against the organization’s information system as a break in one layer only leads the attacker to the next layer.
Which of the following security strategies did Shall y incorporate in the incident response plan?

NEW QUESTION 82
John, a professional hacker, is attacking an organization, and is trying to destroy the connectivity between an AP and client to make the target unavailable to other wireless devices.
Which of the following attacks is John performing in this case?

NEW QUESTION 83
The role that applies appropriate technology and tries to eradicate and recover from the incident is known as:

NEW QUESTION 84
If the loss anticipated is greater than the agreed upon threshold; the organization will:

NEW QUESTION 85
A malware code that infects computer files, corrupts or deletes the data in them and requires a host file to
propagate is called:

NEW QUESTION 86
The correct sequence of incident management process is:

NEW QUESTION 87
Which of the following forensic investigation phases should occur first?

NEW QUESTION 88
To recover, analyze, and preserve computer and related materials in such a way that it can be presented as evidence in a court of law and identify the evidence in short time, estimate the potential impact of the malicious activity on the victim, and assess the intent and identity of the perpetrator is known as:

NEW QUESTION 89
Stanley works as an incident responder at a top MNC based in Singapore. He was asked to investigate a cybersecurity incident that recently occurred in the company. While investigating the incident, he collected evidence from the victim systems. He must present this evidence in a clear and comprehensible manner to the members of a jury so that the evidence clarifies the facts and further helps in obtaining an expert opinion on the incident to conf rm the investigation process.
In the above scenario, which of the following characteristics of the digital evidence did Stanley attempt to preserve?

NEW QUESTION 90
You are talking to a colleague who is deciding what information they should include in their organization’s logs to help with security auditing.
Which of the following items should you tell them to NOT log?

NEW QUESTION 91
A self-replicating malicious code that does not alter files but resides in active memory and duplicates itself, spreads through the infected network automatically and takes advantage of file or information transport features on the system to travel independently is called:

NEW QUESTION 92
Identify the network security incident where intended authorized users are prevented from using system, network, or applications by flooding the network with high volume of traffic that consumes all existing network resources.

NEW QUESTION 93
A distributed Denial of Service (DDoS) attack is a more common type of DoS Attack, where a single system is
targeted by a large number of infected machines over the Internet. In a DDoS attack, attackers first infect
multiple systems which are known as:

NEW QUESTION 94
According to NITS, what are the 5 main actors in cloud computing?

NEW QUESTION 95
The goal of incident response is to handle the incident in a way that minimizes damage and reduces recovery time and cost. Which of the following does NOT constitute a goal of incident response?