Download EC-Council Certified Incident Handler.212-89.ExamTopics.2026-07-16.89q.tqb

Vendor: ECCouncil
Exam Code: 212-89
Exam Name: EC-Council Certified Incident Handler
Date: Jul 16, 2026
File Size: 348 KB

How to open TQB files?

Files with TQB (Taurus Question Bank) extension can be opened by Taurus Exam Studio.

Demo Questions

Question 1
The network perimeter should be configured in such a way that it denies all incoming and outgoing traffic/ services that are not required. Which service listed below, if blocked, can help in preventing Denial of Service attack?
  1. SAM service
  2. POP3 service
  3. SMTP service
  4. Echo service
Correct answer: D
Question 2
Quantitative risk is the numerical determination of the probability of an adverse event and the extent of the losses due to the event. Quantitative risk is calculated as:
  1. (Probability of Loss) X (Loss)
  2. (Loss) / (Probability of Loss)
  3. (Probability of Loss) / (Loss)
  4. Significant Risks X Probability of Loss X Loss
Correct answer: A
Question 3
Which of the following is an incident tracking, reporting and handling tool:
  1. CRAMM
  2. RTIR
  3. NETSTAT
  4. EAR/ Pilar
Correct answer: B
Question 4
Preventing the incident from spreading and limiting the scope of the incident is known as:
  1. Incident Eradication
  2. Incident Protection
  3. Incident Containment
  4. Incident Classification
Correct answer: C
Question 5
In NIST risk assessment/ methodology; the process of identifying the boundaries of an IT system along with the resources and information that constitute the system is known as:
  1. Asset Identification
  2. System characterization
  3. Asset valuation
  4. System classification
Correct answer: B
Question 6
The left over risk after implementing a control is called:
  1. Residual risk
  2. Unaccepted risk
  3. Low risk
  4. Critical risk
Correct answer: A
Question 7
An assault on system security that is derived from an intelligent threat is called:
  1. Threat Agent
  2. Vulnerability
  3. Attack
  4. Risk
Correct answer: C
Question 8
An adversary attacks the information resources to gain undue advantage is called:
  1. Defensive Information Warfare
  2. Offensive Information Warfare
  3. Electronic Warfare
  4. Conventional Warfare
Correct answer: B
Question 9
One of the goals of CSIRT is to manage security problems by taking a certain approach towards the customers' security vulnerabilities and by responding effectively to potential information security incidents. Identify the incident response approach that focuses on developing the infrastructure and security processes before the occurrence or detection of an event or any incident:
  1. Interactive approach
  2. Introductive approach
  3. Proactive approach
  4. Qualitative approach
Correct answer: C
Question 10
An estimation of the expected losses after an incident helps organization in prioritizing and formulating their incident response. The cost of an incident can be categorized as a tangible and intangible cost. Identify the tangible cost associated with virus outbreak?
  1. Loss of goodwill
  2. Damage to corporate reputation
  3. Psychological damage
  4. Lost productivity damage
Correct answer: D
HOW TO OPEN VCE FILES

Use VCE Exam Simulator to open VCE files
Avanaset

HOW TO OPEN VCEX FILES

Use ProfExam Simulator to open VCEX files
ProfExam Screen

ProfExam
ProfExam at a 20% markdown

You have the opportunity to purchase ProfExam at a 20% reduced price

Get Now!