212-89 EC-Council Exam Questions and Free Practice Test

Question 25

A risk mitigation strategy determines the circumstances under which an action has to be taken to minimize and overcome risks. Identify the risk mitigation strategy that focuses on minimizing the probability of risk and losses by searching for vulnerabilities in the system and appropriate controls:

A. Risk Assumption

B. Research and acknowledgment

C. Risk limitation

D. Risk absorption

Correct Answer:B

Question 26

A computer Risk Policy is a set of ideas to be implemented to overcome the risk associated with computer security incidents. Identify the procedure that is NOT part of the computer risk policy?

A. Procedure to identify security funds to hedge risk

B. Procedure to monitor the efficiency of security controls

C. Procedure for the ongoing training of employees authorized to access the system

D. Provisions for continuing support if there is an interruption in the system or if the system crashes

Correct Answer:C

Question 27

The USB tool (depicted below) that is connected to male USB Keyboard cable and not detected by antispyware tools is most likely called:
212-89 dumps exhibit

A. Software Key Grabber

B. Hardware Keylogger

C. USB adapter

D. Anti-Keylogger

Correct Answer:B

Question 28

The main feature offered by PGP Desktop Email is:

A. Email service during incidents

B. End-to-end email communications

C. End-to-end secure email service

D. None of the above

Correct Answer:C

Question 29

When an employee is terminated from his or her job, what should be the next immediate step taken by an organization?

A. All access rights of the employee to physical locations, networks, systems, applications and data should be disabled

B. The organization should enforce separation of duties

C. The access requests granted to an employee should be documented and vetted by the supervisor

D. The organization should monitor the activities of the system administrators and privileged users who have permissions to access the sensitive information

Correct Answer:A

Question 30

CERT members can provide critical support services to first responders such as:

A. Immediate assistance to victims

B. Consolidated automated service process management platform

C. Organizing spontaneous volunteers at a disaster site

D. A + C

Correct Answer:D

START 212-89 EXAM