212-89 Exam Question 11
Sophia, a security analyst, notices that a sensitive folder on a file server was accessed during off- hours by an intern using authorized credentials. The access was not flagged because the intern's permissions had not been reviewed in months, even after their project ended. What process should have been enforced to avoid this insider threat?
212-89 Exam Question 12
Incident handlers at Delta Corp. were alerted about potential unauthorized access to a sensitive server room. Upon reaching the scene, what should be their immediate step to ensure the integrity of potential evidence?
212-89 Exam Question 13
During a web application security incident, the incident response team discovers that a database containing sensitive customer information has been compromised. What is the first step the incident response team should take during the containment phase?
212-89 Exam Question 14
While handling and responding to a potential web application security incident, you are required to conduct a vulnerability scan of your website. As an EC-Council Certified Incident Handler(ECIH), which of the following steps is NOT part of the process of performing web application vulnerability scanning using Acunetix Web Vulnerability Scanner(WVS)?
212-89 Exam Question 15
Which of the following is a type of malicious code or software that appears legitimate but can take control of your computer?