Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Eccouncil Exam 212-89 Topic 2 Question 71 Discussion

Actual exam question for Eccouncil's 212-89 exam
Question #: 71
Topic #: 2
[All 212-89 Questions]

In which of the following phases of incident handling and response (IH&R) process the identified security incidents are analyzed, validated, categorized, and prioritized?

Show Suggested Answer Hide Answer
Suggested Answer: B

Email Dossier is a tool designed to perform detailed investigations on email messages to verify their authenticity and trace their origin. It can analyze email headers and provide information about the route an email has taken, the servers it passed through, and potentially malicious links or origins. For an incident handler like Stenley, tasked with verifying the validity of emails and containing malicious email threats, Email Dossier serves as a practical tool for analyzing and validating emails received by employees. By using this tool, Stenley can identify fraudulent or suspicious emails, thereby helping to protect the organization from phishing attacks, malware distribution, and other email-based threats.


Contribute your Thoughts:

Bambi
2 days ago
Incident triage seems like the obvious choice here. Gotta sort out the details before you can contain or notify anyone.
upvoted 0 times
...
Lenna
5 days ago
Hmm, this one's a tricky one. I bet the answer has something to do with analyzing the incident before taking any action.
upvoted 0 times
...
Corazon
6 days ago
I'm not sure, but it makes sense that incident triage would be the phase for analyzing and categorizing incidents.
upvoted 0 times
...
Melodie
7 days ago
I agree with Ardella, incident triage is where incidents are analyzed and prioritized.
upvoted 0 times
...
Ardella
9 days ago
I think the answer is D) Incident triage.
upvoted 0 times
...

Save Cancel