Eccouncil 212-89 Exam - Topic 1 Question 70 Discussion

Actual exam question for Eccouncil's 212-89 exam

Question #: 70
Topic #: 1

Eve's is an incident handler in ABC organization. One day, she got a complaint about email hacking incident from one of the employees of the organization. As a part of

incident handling and response process, she must follow many recovery steps in order to recover from incident impact to maintain business continuity.

What is the first step that she must do to secure employee account?

ARestore the email services and change the password

BEnable two-factor authentication

CEnable scanning of links and attachments in all the emails

DDisabling automatic file sharing between the systems

Show Suggested Answer

Suggested Answer: A

The first step in securing an employee's account following an email hacking incident involves restoring access to the email services if necessary and immediately changing the password to prevent unauthorized access. This action ensures that the attacker is locked out of the account as quickly as possible. While enabling two-factor authentication, scanning links and attachments, and disabling automatic file sharing are important security measures, they come into play after ensuring that the compromised account is first secured by changing its password to halt any ongoing unauthorized access. Reference: The ECIH v3 certification materials cover the initial steps to be taken when responding to incidents involving compromised accounts, emphasizing the importance of quickly changing passwords to secure the accounts against further unauthorized access.

by Mitsue at Sep 15, 2024, 07:01 PM

Limited Time Offer

25%

Off

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Louvenia

3 months ago

Not sure if just changing the password is enough...

upvoted 0 times

...

Pearlene

3 months ago

Agreed, two-factor is a must these days!

upvoted 0 times

...

Helene

3 months ago

Wait, isn't restoring email services a bit premature?

upvoted 0 times

...

Dahlia

4 months ago

I think enabling two-factor authentication is more important.

upvoted 0 times

...

Refugia

4 months ago

Definitely should change the password first!

upvoted 0 times

...

Luther

4 months ago

Disabling file sharing sounds relevant, but I don't think it's the first action to take after an email hacking incident.

upvoted 0 times

...

Floyd

4 months ago

I feel like scanning links and attachments is important, but it seems more like a preventive measure rather than an immediate recovery step.

upvoted 0 times

...

Noel

4 months ago

I remember a practice question where enabling two-factor authentication was emphasized as a crucial first step. That might be the right answer here.

upvoted 0 times

...

Sunny

5 months ago

I think the first step should be to change the password, but I'm not entirely sure if restoring email services comes first.

upvoted 0 times

...

Rosio

5 months ago

I'm confident that option B, enabling two-factor authentication, is the correct first step. Securing the account should be the top priority in an email hacking incident.

upvoted 0 times

...

Florinda

5 months ago

Okay, let's think this through. The question is asking about the first step, so I think enabling two-factor authentication (option B) is the way to go. That will help prevent further unauthorized access to the account.

upvoted 0 times

...

Joanne

5 months ago

Hmm, I'm a bit unsure here. Should I go with option A and restore the email services first before changing the password? Or is enabling two-factor authentication the more critical first step?

upvoted 0 times

...

Bobbye

5 months ago

This seems like a straightforward incident response question. I'd start by securing the employee's account, so I'd go with option B to enable two-factor authentication.

upvoted 0 times

...

Gerri

1 year ago

B) Enable two-factor authentication is the way to go. It's like having a secret decoder ring for your email account.

upvoted 0 times

...

Bernardine

1 year ago

B) Enable two-factor authentication is the right answer. It's like having a bodyguard for your email account, and who doesn't love a good bodyguard?

upvoted 0 times

Merri

1 year ago

D) Disabling automatic file sharing between the systems

upvoted 0 times

...

Ahmed

1 year ago

C) Enable scanning of links and attachments in all the emails

upvoted 0 times

...

Vallie

1 year ago

B) Enable two-factor authentication

upvoted 0 times

...

Jaime

1 year ago

A) Restore the email services and change the password

upvoted 0 times

...

Marget

1 year ago

C) Enable scanning of links and attachments in all the emails? Sounds like a good idea, but it's like trying to catch a fly with chopsticks.

upvoted 0 times

...

Cathrine

1 year ago

A) Restore the email services and change the password? Nah, that's like trying to lock the barn door after the horse has already bolted.

upvoted 0 times

...

Venita

1 year ago

B) Enable two-factor authentication is the way to go. It's like having a secret handshake for your email account.

upvoted 0 times

Rozella

1 year ago

C) Enable scanning of links and attachments in all the emails

upvoted 0 times

...

Teddy

1 year ago

B) Enable two-factor authentication

upvoted 0 times

...

Viva

1 year ago

A) Restore the email services and change the password

upvoted 0 times

...

Janna

1 year ago

B) Enable two-factor authentication is the right answer. It's like having a bodyguard for your email account, and who doesn't love a good bodyguard?

upvoted 0 times

Shawnee

1 year ago

C) Enable scanning of links and attachments in all the emails

upvoted 0 times

...

Magdalene

1 year ago

B) Enable two-factor authentication

upvoted 0 times

...

An

1 year ago

A) Restore the email services and change the password

upvoted 0 times

...

Shawnna

1 year ago

B) Enable two-factor authentication is the way to go. It's like having a secret decoder ring for your email account.

upvoted 0 times

...

Portia

1 year ago

I believe enabling two-factor authentication (Option B) would also be a good step to enhance security.

upvoted 0 times

...

Rima

1 year ago

C) Enable scanning of links and attachments in all the emails? Sounds like a good idea, but it's like trying to catch a fly with chopsticks.

upvoted 0 times

...

Ira

1 year ago

A) Restore the email services and change the password? Nah, that's like trying to lock the barn door after the horse has already bolted.

upvoted 0 times

Edelmira

1 year ago

D) Disabling automatic file sharing between the systems

upvoted 0 times

...

Serina

1 year ago

C) Enable scanning of links and attachments in all the emails

upvoted 0 times

...

Bo

1 year ago

B) Enable two-factor authentication

upvoted 0 times

...

Lucille

1 year ago

I agree with Velda, restoring email services and changing the password is crucial to secure the employee account.

upvoted 0 times

...

Deandrea

1 year ago

B) Enable two-factor authentication is the way to go. It's like having a secret handshake for your email account.

upvoted 0 times

Jordan

1 year ago

D) Disabling automatic file sharing between the systems

upvoted 0 times

...

Tegan

1 year ago

C) Enable scanning of links and attachments in all the emails

upvoted 0 times

...

Eladia

1 year ago

B) Enable two-factor authentication

upvoted 0 times

...

Brittni

1 year ago

A) Restore the email services and change the password

upvoted 0 times

...

Velda

1 year ago

I think the first step should be to restore the email services and change the password (Option A).

upvoted 0 times

...