Eccouncil Exam 312-38 Topic 2 Question 92 Discussion

Actual exam question for Eccouncil's 312-38 exam

Question #: 92
Topic #: 2

You are monitoring your network traffic with the Wireshark utility and noticed that your network is experiencing a large amount of traffic from certain region. You suspect a DoS incident on the network.

What will be your first reaction as a first responder?

ADisable Virus Protection

BMake an initial assessment

CCommunicate the incident

DAvoid Fear, Uncertainty and Doubt

Show Suggested Answer

Suggested Answer: B

As a first responder to a suspected DoS incident, the initial step is to make an assessment of the situation. This involves analyzing the network traffic using tools like Wireshark to confirm the nature of the traffic and determine if it is indeed a DoS attack.The assessment will help in understanding the scope and impact of the incident and is crucial for deciding the subsequent steps in the response process123.

by Kerry at Sep 14, 2024, 04:33 AM

Limited Time Offer

25%

Off

Get Premium 312-38 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lonny

4 months ago

This question is a real head-scratcher. I'm imagining the network admin just staring at the Wireshark display, muttering 'Oh no, not again!'

upvoted 0 times

...

Toi

4 months ago

B) Make an initial assessment, for sure. Wouldn't want to jump the gun and mess things up even more. Gotta gather intel first.

upvoted 0 times

...

Vi

4 months ago

D) Avoid Fear, Uncertainty and Doubt? Pfft, I'm not going to just sit back and pretend everything's fine when the network's under attack. Gotta take action!

upvoted 0 times

...

Chandra

4 months ago

C) Communicate the incident? Well, yeah, you gotta let the higher-ups know what's happening. Can't just sit on this and hope it goes away.

upvoted 0 times

Kattie

3 months ago

D) Avoid Fear, Uncertainty and Doubt

upvoted 0 times

...

Lanie

3 months ago

C) Communicate the incident

upvoted 0 times

...

Jennifer

3 months ago

B) Make an initial assessment

upvoted 0 times

...

Audra

4 months ago

A) Disable Virus Protection

upvoted 0 times

...

Anthony

4 months ago

B) Make an initial assessment? Duh, that's the logical first step. Can't just go around disabling important security measures without knowing what's going on.

upvoted 0 times

Jannette

3 months ago

User3: Communication is key, we should inform the necessary parties about the incident.

upvoted 0 times

...

Katlyn

3 months ago

User2: Agreed, we need to gather more information before taking any action.

upvoted 0 times

...

Cheryl

3 months ago

User1: Let's make an initial assessment to understand the situation.

upvoted 0 times

...

Talia

4 months ago

D) Avoid Fear, Uncertainty and Doubt - Definitely the way to go. Stay calm, be the hero this network needs.

upvoted 0 times

Glenna

3 months ago

D) Avoid Fear, Uncertainty and Doubt

upvoted 0 times

...

Sunny

3 months ago

C) Communicate the incident

upvoted 0 times

...

Leigha

3 months ago

D) Avoid Fear, Uncertainty and Doubt

upvoted 0 times

...

Annabelle

4 months ago

B) Make an initial assessment

upvoted 0 times

...

Hassie

4 months ago

C) Communicate the incident

upvoted 0 times

...

Natalie

4 months ago

B) Make an initial assessment

upvoted 0 times

...

Hyun

5 months ago

I think communicating the incident should also be a priority to coordinate a response.

upvoted 0 times

...

Elke

5 months ago

I agree with Misty, assessing the situation is crucial.

upvoted 0 times

...

Misty

5 months ago

I would make an initial assessment.

upvoted 0 times

...

Corrie

5 months ago

Whoa, this is like a video game level where you gotta stop the DDoS boss! I'd go with B) and make sure I don't accidentally enable the cheat codes... I mean, virus protection.

upvoted 0 times

Darrin

4 months ago

Let's stay calm and avoid spreading fear, uncertainty, and doubt.

upvoted 0 times

...

Dante

4 months ago

Once we know what we're dealing with, we can communicate the incident to the team.

upvoted 0 times

...

Karon

5 months ago

Good idea, we need to figure out the extent of the incident.

upvoted 0 times

...

Mariann

5 months ago

I'd go with B) and make an initial assessment.

upvoted 0 times

...

Tarra

5 months ago

C) Communicate the incident - Alerting the team is key. Can't tackle this alone, need all hands on deck.

upvoted 0 times

...

Izetta

5 months ago

B) Make an initial assessment - Gotta gather intel before jumping into action. Disabling virus protection is a big no-no, and uncertainty won't help anyone.

upvoted 0 times

Blondell

5 months ago

C) Communicate the incident - Keeping everyone in the loop is crucial in handling the situation effectively.

upvoted 0 times

...

Charlie

5 months ago

B) Make an initial assessment - Gotta gather intel before jumping into action.

upvoted 0 times

...