Free Access to EC-COUNCIL.212-89.v2022-03-03.q72 with Valid Practice Test (Page 6)

Question 21

What is the best staffing model for an incident response team if current employees' expertise is very low?

A.Fully insourced
B.Fully outsourced
C.All the above
D.Partially outsourced

Question 22

A living high level document that states in writing a requirement and directions on how an agency plans to protect its information technology assets is called:

A.Information security Procedure
B.Information security Policy
C.Information security Baseline
D.Information security Standard

Question 23

Multiple component incidents consist of a combination of two or more attacks in a system. Which of the following is not a multiple component incident?

A.An attacker redirecting user to a malicious website and infects his system with Trojan
B.An attacker infecting a machine to launch a DDoS attack
C.An attacker using email with malicious code to infect internal workstation
D.An insider intentionally deleting files from a workstation

Question 24

Contingency planning enables organizations to develop and maintain effective methods to handle
emergencies. Every organization will have its own specific requirements that the planning should address.
There are five major components of the IT contingency plan, namely supporting information, notification
activation, recovery and reconstitution and plan appendices. What is the main purpose of the reconstitution
plan?

A.To define the notification procedures, damage assessments and offers the plan activation
B.To provide the introduction and detailed concept of the contingency plan
C.To provide a sequence of recovery activities with the help of recovery procedures
D.To restore the original site, tests systems to prevent the incident and terminates operations

Question 25

The sign of incident that may happen in the future is called:

A.A Reactive
B.An Indication
C.A Precursor
D.A Proactive

Question 21

Question 22

Question 23

Question 24

Question 25

Download PDF File