EC-COUNCIL 312-39 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-39 Online Questions & Answers

• Question 1:

  The threat intelligence, which will help you, understand adversary intent and make informed decision to ensure appropriate security in alignment with risk. What kind of threat intelligence described above?

  A. Tactical Threat Intelligence
  B. Strategic Threat Intelligence
  C. Functional Threat Intelligence
  D. Operational Threat Intelligence
  B. Strategic Threat Intelligence

• Question 2:

  A type of threat intelligent that find out the information about the attacker by misleading them is known as __________.

  A. Threat trending Intelligence
  B. Detection Threat Intelligence
  C. Operational Intelligence
  D. Counter Intelligence
  D. Counter Intelligence

• Question 3:

  Which of the following attacks causes sudden changes in file extensions or increase in file renames at rapid speed?

  A. Ransomware Attack
  B. DoS Attack
  C. DHCP starvation Attack
  D. File Injection Attack
  A. Ransomware Attack

• Question 4:

  Which of the following stage executed after identifying the required event sources?

  A. Identifying the monitoring Requirements
  B. Defining Rule for the Use Case
  C. Implementing and Testing the Use Case
  D. Validating the event source against monitoring requirement
  D. Validating the event source against monitoring requirement

• Question 5:

  Where will you find the reputation IP database, if you want to monitor traffic from known bad IP reputation using OSSIM SIEM?

  A. /etc/ossim/reputation
  B. /etc/ossim/siem/server/reputation/data
  C. /etc/siem/ossim/server/reputation.data
  D. /etc/ossim/server/reputation.data
  A. /etc/ossim/reputation

• Question 6:

  Which of the following directory will contain logs related to printer access?

  A. /var/log/cups/Printer_log file
  B. /var/log/cups/access_log file
  C. /var/log/cups/accesslog file
  D. /var/log/cups/Printeraccess_log file
  B. /var/log/cups/access_log file

• Question 7:

  Banter is a threat analyst in Christine Group of Industries. As a part of the job, he is currently formatting and structuring the raw data. He is at which stage of the threat intelligence life cycle?

  A. Dissemination and Integration
  B. Processing and Exploitation
  C. Collection
  D. Analysis and Production
  B. Processing and Exploitation

• Question 8:

  Identify the attack in which the attacker exploits a target system through publicly known but still unpatched vulnerabilities.

  A. Slow DoS Attack
  B. DHCP Starvation
  C. Zero-Day Attack
  D. DNS Poisoning Attack
  C. Zero-Day Attack

• Question 9:

  John, a threat analyst at GreenTech Solutions, wants to gather information about specific threats against the organization. He started collecting information from various sources, such as humans, social media, chat room, and so on, and created a report that contains malicious activity.

  Which of the following types of threat intelligence did he use?

  A. Strategic Threat Intelligence
  B. Technical Threat Intelligence
  C. Tactical Threat Intelligence
  D. Operational Threat Intelligence
  D. Operational Threat Intelligence

• Question 10:

  Mike is an incident handler for PNP Infosystems Inc. One day, there was a ticket raised regarding a critical incident and Mike was assigned to handle the incident. During the process of incident handling, at one stage, he has performed incident analysis and validation to check whether the incident is a true incident or a false positive.

  Identify the stage in which he is currently in.

  A. Post-Incident Activities
  B. Incident Recording and Assignment
  C. Incident Triage
  D. Incident Disclosure
  B. Incident Recording and Assignment