Logo ExamsQA
Exit
Official Bank 0/305

EC Council Certified Incident Handler (ECIH v2) Exam (212-89) - EC-Council Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
305 Total Questions
1
Question
DigitalSoft, a major software development firm, recently discovered unauthorized access to its codebase. The culprit was a disgruntled employee who had been overlooked for a promotion. The company wants to prevent such insider threats in the future. What is the most effective measure it can implement?
Options
A Conduct regular audits of user access and use behavior analytics.
B Implement a strict hierarchy where only senior employees have access to sensitive data.
C Implement mandatory password changes every 30 days.
D Use biometric authentication for accessing sensitive data.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
James is working as an incident responder at CyberSol Inc. The management instructed James to investigate a cybersecurity incident that recently happened in the company. As a part of the investigation process, James started collecting volatile information from a system running on Windows operating system.

Which of the following commands helps James in determining all the executable files for running processes?
Options
A doskey/history
B cate A &. time ,/t
C netstat -ab
D top
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
A logistics company relying heavily on cloud-based inventory management discovered unauthorized activity initiated by a third-party contractor. The investigation revealed that the contractor's login was reused across multiple departments and lacked any tracking mechanism or role-specific restrictions to limit its scope. What cloud security best practice should be implemented to prevent such violations?
Options
A Use of anonymized data during inventory analytics
B Implementation of Secure Sockets Layer (SSL) encryption on internal systems
C Enforcement of strict user access control and credential isolation
D Routine vulnerability scans on mobile apps used by delivery teams
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Which of the following best describes an email issued as an attack medium, in which several messages are sent to a mailbox to cause overflow?
Options
A Masquerading
B Email-bombing
C Smurf attack
D Spoofing
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
After a recent upgrade, users of Trend Spot encountered slow website load times. Analysis revealed attackers flooding the application with fake search requests, causing an application-layer DoS attack.

How should Trend Spot primarily respond?
Options
A Shift to a more robust hosting provider.
B Implement IP address-based blocking for suspicious traffic.
C Regularly clear the server cache.
D Introduce rate limiting on search request functionality.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.