212-89 Exam Question 166
An employee accidentally emails confidential customer information to a personal email address.
What is the biggest challenge faced by the incident response team in this scenario?
What is the biggest challenge faced by the incident response team in this scenario?
212-89 Exam Question 167
An insider threat response plan helps an organization minimize the damage caused by malicious insiders. One of the approaches to mitigate these threats is setting up controls from the human resources department. Which of the following guidelines can the human resources department use?
212-89 Exam Question 168
Tara, a certified first responder in a digital forensics team, is dispatched to investigate a suspected insider attack targeting a critical workstation in the finance department. Upon arriving at the scene, she takes a methodical approach: she begins labeling all connected network cables, photographs the back panel of the workstation, documents cable connections, and records the power status of each connected device, including peripherals like external drives and monitors.
She also notes the orientation and placement of equipment on the desk and the surrounding environment. These actions are part of her protocol to ensure that, if the devices need to be moved for forensic analysis, investigators can accurately replicate the system's physical setup at the time of the incident. What is Tara aiming to achieve with these actions?
She also notes the orientation and placement of equipment on the desk and the surrounding environment. These actions are part of her protocol to ensure that, if the devices need to be moved for forensic analysis, investigators can accurately replicate the system's physical setup at the time of the incident. What is Tara aiming to achieve with these actions?
212-89 Exam Question 169
At NeoTech, after a suspected insider threat incident, a smartphone believed to be a key piece of evidence was secured. While waiting for forensic experts, what should the incident handler do to maintain the phone's data integrity?
212-89 Exam Question 170
Your organization uses the Google Cloud Platform for its operations. You, as an EC-Council Certified Incident Handler, have been alerted of a potential security incident involving unauthorized access to sensitive data. Which of the following should be your first step in handling this incident?