MENU
Eve's is an incident handler in ABC organization. One day, she got a complaint about email hacking incident from one of the employees of the organization. As a part of
incident handling and response process, she must follow many recovery steps in order to recover from incident impact to maintain business continuity.
What is the first step that she must do to secure employee account?
Suggested Answer: A
Get Premium 212-89 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The first step in securing an employee's account following an email hacking incident involves restoring access to the email services if necessary and immediately changing the password to prevent unauthorized access. This action ensures that the attacker is locked out of the account as quickly as possible. While enabling two-factor authentication, scanning links and attachments, and disabling automatic file sharing are important security measures, they come into play after ensuring that the compromised account is first secured by changing its password to halt any ongoing unauthorized access. Reference: The ECIH v3 certification materials cover the initial steps to be taken when responding to incidents involving compromised accounts, emphasizing the importance of quickly changing passwords to secure the accounts against further unauthorized access.
43 comments · newest first
LO
Louvenia
11 months ago
Not sure if just changing the password is enough...
PE
Pearlene
11 months ago
Agreed, two-factor is a must these days!
HE
Helene
11 months ago
Wait, isn't restoring email services a bit premature?
DA
Dahlia
12 months ago
I think enabling two-factor authentication is more important.
RE
Refugia
12 months ago
Definitely should change the password first!
LU
Luther
1 year ago
Disabling file sharing sounds relevant, but I don't think it's the first action to take after an email hacking incident.
FL
Floyd
1 year ago
I feel like scanning links and attachments is important, but it seems more like a preventive measure rather than an immediate recovery step.
NO
Noel
1 year ago
I remember a practice question where enabling two-factor authentication was emphasized as a crucial first step. That might be the right answer here.
SU
Sunny
1 year ago
I think the first step should be to change the password, but I'm not entirely sure if restoring email services comes first.
RO
Rosio
1 year ago
I'm confident that option B, enabling two-factor authentication, is the correct first step. Securing the account should be the top priority in an email hacking incident.
FL
Florinda
1 year ago
Okay, let's think this through. The question is asking about the first step, so I think enabling two-factor authentication (option B) is the way to go. That will help prevent further unauthorized access to the account.
JO
Joanne
1 year ago
Hmm, I'm a bit unsure here. Should I go with option A and restore the email services first before changing the password? Or is enabling two-factor authentication the more critical first step?
BO
Bobbye
1 year ago
This seems like a straightforward incident response question. I'd start by securing the employee's account, so I'd go with option B to enable two-factor authentication.
GE
Gerri
2 years ago
B) Enable two-factor authentication is the way to go. It's like having a secret decoder ring for your email account.
BE
Bernardine
2 years ago
B) Enable two-factor authentication is the right answer. It's like having a bodyguard for your email account, and who doesn't love a good bodyguard?
ME
Merri
2 years ago
D) Disabling automatic file sharing between the systems
AH
Ahmed
2 years ago
C) Enable scanning of links and attachments in all the emails
VA
Vallie
2 years ago
B) Enable two-factor authentication
JA
Jaime
2 years ago
A) Restore the email services and change the password
MA
Marget
2 years ago
C) Enable scanning of links and attachments in all the emails? Sounds like a good idea, but it's like trying to catch a fly with chopsticks.
CA
Cathrine
2 years ago
A) Restore the email services and change the password? Nah, that's like trying to lock the barn door after the horse has already bolted.
VE
Venita
2 years ago
B) Enable two-factor authentication is the way to go. It's like having a secret handshake for your email account.
RO
Rozella
2 years ago
C) Enable scanning of links and attachments in all the emails
TE
Teddy
2 years ago
B) Enable two-factor authentication
VI
Viva
2 years ago
A) Restore the email services and change the password
JA
Janna
2 years ago
B) Enable two-factor authentication is the right answer. It's like having a bodyguard for your email account, and who doesn't love a good bodyguard?
SH
Shawnee
2 years ago
C) Enable scanning of links and attachments in all the emails
MA
Magdalene
2 years ago
B) Enable two-factor authentication
AN
An
2 years ago
A) Restore the email services and change the password
SH
Shawnna
2 years ago
B) Enable two-factor authentication is the way to go. It's like having a secret decoder ring for your email account.
PO
Portia
2 years ago
I believe enabling two-factor authentication (Option B) would also be a good step to enhance security.
RI
Rima
2 years ago
C) Enable scanning of links and attachments in all the emails? Sounds like a good idea, but it's like trying to catch a fly with chopsticks.
IR
Ira
2 years ago
A) Restore the email services and change the password? Nah, that's like trying to lock the barn door after the horse has already bolted.
ED
Edelmira
2 years ago
D) Disabling automatic file sharing between the systems
SE
Serina
2 years ago
C) Enable scanning of links and attachments in all the emails
BO
Bo
2 years ago
B) Enable two-factor authentication
LU
Lucille
2 years ago
I agree with Velda, restoring email services and changing the password is crucial to secure the employee account.
DE
Deandrea
2 years ago
B) Enable two-factor authentication is the way to go. It's like having a secret handshake for your email account.
JO
Jordan
2 years ago
D) Disabling automatic file sharing between the systems
TE
Tegan
2 years ago
C) Enable scanning of links and attachments in all the emails
EL
Eladia
2 years ago
B) Enable two-factor authentication
BR
Brittni
2 years ago
A) Restore the email services and change the password
VE
Velda
2 years ago
I think the first step should be to restore the email services and change the password (Option A).