Halloween Special 2026! Get Up to 25% OFF Practice Questions! Limited Time - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

EC-Council 212-89 Exam - Topic 1 Question 79 Discussion

Posted by Lashawn on Apr 08, 2025 at 12:02 AM

After a recent email attack, Harry is analyzing the incident to obtain important information related to the incident. While investigating the incident, he is trying to

extract information such as sender identity, mail server, sender's IP address, location, and so on.

Which of the following tools Harry must use to perform this task?

Suggested Answer: C

Yesware is a tool primarily known for its email tracking capabilities, which can be useful for sales, marketing, and customer relationship management. However, in the context of investigating email attacks and analyzing incidents to extract details such as sender identity, mail server, sender's IP address, and location, a more appropriate tool would be one that specializes in analyzing and extracting detailed header information from emails, providing insights into the path an email took across the internet. While Yesware can provide data related to email interactions, it might not offer the depth of forensic analysis required for incident investigation. Tools like email header analyzers, which are designed specifically for dissecting and interpreting email headers, would be more fitting. In the absence of a direct match from the given options, the description might imply a broader interpretation of tools like Yesware in context but traditionally, tools specifically designed for email forensics would be sought after for this task.


Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
45 comments · newest first
TA
Tasia 10 months ago
I agree, Sharp seems like the right tool for this task.
ST
Stevie 10 months ago
Definitely not Clamwin, that's for antivirus, not email forensics.
CL
Clement 11 months ago
Wait, can Sharp really provide all that info? Sounds too good to be true!
GR
Grover 11 months ago
Logly could help with logs, but not sure it's the best choice here.
KA
Kandis 11 months ago
I think he should use Sharp for email analysis.
LO
Loren 11 months ago
Sharp sounds familiar, but I can't recall if it's specifically for email investigations. I need to double-check my notes!
ER
Ernie 12 months ago
I'm a bit confused; I thought Clamwin was more for antivirus purposes. Would it really help in this situation?
KA
Kallie 12 months ago
I remember practicing with similar questions, and I think Logly could be the right choice since it deals with logs and analytics.
TA
Tamesha 1 year ago
I think Harry might need a tool that specializes in email analysis, but I'm not sure which one fits best.
KA
Karon 1 year ago
Hmm, I'm not familiar with Sharp. Clamwin is an antivirus tool, so that's probably not the right choice. Yesware is for email tracking, which doesn't seem relevant here. I think I'm going to go with Logly - it sounds like the most appropriate tool based on the question.
OM
Omega 1 year ago
Okay, let's think this through. Harry needs to extract the sender's identity, mail server, IP address, and location. That sounds like the kind of information you'd get from a digital forensics tool, not a general email client. I'd go with Sharp for this task.
BE
Beula 1 year ago
I'm a bit unsure about this one. Is Logly the right tool for the job? I feel like there might be a more specialized tool for analyzing email incidents and tracing the sender's information.
LO
Louis 1 year ago
Hmm, this seems like a pretty straightforward question. I think the tool I'd use here is Logly - it's designed for email analysis and should be able to extract all the key details Harry needs.
DE
Dean 1 year ago
Harry should just ask the email provider for the details. Seems like a waste of time trying to figure it out on his own. But if I had to choose, I'd go with Option D, Sharp.
DA
Dalene 1 year ago
↳ replying to Dean
User3: I agree, Sharp seems like the right tool for the job.
MA
Marta 1 year ago
↳ replying to Dean
User2: Option D, Sharp, would be a good choice.
DO
Dortha 1 year ago
↳ replying to Dean
User1: Harry should just ask the email provider for the details.
JI
Jimmie 2 years ago
Who names these tools? Yesware and Logly? Really? I'm going with Option D, Sharp, because at least it sounds like it might do the job.
BE
Bernadine 1 year ago
↳ replying to Jimmie
Cammy: Let's go with Option D then, Sharp it is.
CA
Cammy 1 year ago
↳ replying to Jimmie
User 2: I think so too, it does sound like it could get the job done.
SH
Shawna 1 year ago
↳ replying to Jimmie
User 1: I agree, Sharp sounds like a reliable tool for this task.
JE
Jerry 2 years ago
Hmm, I'm not too sure about these options. Isn't there a tool specifically designed for email forensics? I feel like that would be the best choice here.
HE
Hershel 1 year ago
↳ replying to Jerry
I agree, using specialized tools like EnCase or FTK would make the investigation more efficient.
AN
Antione 1 year ago
↳ replying to Jerry
Yeah, those tools are more focused on forensic analysis and would provide better results.
AN
Annice 1 year ago
↳ replying to Jerry
EnCase or FTK would definitely be more suitable for this task.
TA
Tayna 1 year ago
↳ replying to Jerry
There are tools like EnCase or FTK that are specifically designed for email forensics.
IV
Ivette 1 year ago
↳ replying to Jerry
D) Sharp
LO
Lonna 1 year ago
↳ replying to Jerry
C) Yesware
KI
Kiera 1 year ago
↳ replying to Jerry
B) Logly
NA
Nana 1 year ago
↳ replying to Jerry
A) Clamwin
EM
Emeline 2 years ago
I'm going with Option A, Clamwin. It's a good antivirus tool that can scan for malware and potentially reveal some information about the attack.
ME
Melinda 1 year ago
↳ replying to Emeline
Yes, Clamwin is known for its malware scanning capabilities. It could definitely help in this situation.
SI
Silvana 1 year ago
↳ replying to Emeline
I think Clamwin is a good choice too. It can help with malware detection.
RA
Rasheeda 2 years ago
I'm not sure, but I think Clamwin could also be useful for this task.
JA
James 2 years ago
I agree with Davida, Logly is a good tool for extracting information like sender identity and IP address.
WI
Willard 2 years ago
Option D, Sharp, seems like the right tool for the job. It can help extract crucial details about the email attack, like the sender's identity and location.
AL
Alyce 1 year ago
↳ replying to Willard
Great to hear! It's important to have the right tools for investigating email attacks.
GI
Gianna 1 year ago
↳ replying to Willard
I have used Sharp before, and it was very helpful in analyzing email incidents.
TU
Tu 1 year ago
↳ replying to Willard
Yes, I agree. Sharp can provide important details like the sender's IP address and mail server.
SH
Shannan 1 year ago
↳ replying to Willard
I think Sharp is the best option for extracting information from the email attack.
ST
Stefania 1 year ago
↳ replying to Willard
D) Sharp
AA
Aaron 2 years ago
↳ replying to Willard
C) Yesware
RI
Ricki 2 years ago
↳ replying to Willard
B) Logly
GL
Glory 2 years ago
↳ replying to Willard
A) Clamwin
DA
Davida 2 years ago
I think Harry should use Logly for analyzing the incident.
0/2000 characters

Save Cancel