Eccouncil 212-89 Exam - Topic 1 Question 79 Discussion

Actual exam question for Eccouncil's 212-89 exam

Question #: 79
Topic #: 1

After a recent email attack, Harry is analyzing the incident to obtain important information related to the incident. While investigating the incident, he is trying to

extract information such as sender identity, mail server, sender's IP address, location, and so on.

Which of the following tools Harry must use to perform this task?

AClamwin

BLogly

CYesware

DSharp

Show Suggested Answer

Suggested Answer: C

Yesware is a tool primarily known for its email tracking capabilities, which can be useful for sales, marketing, and customer relationship management. However, in the context of investigating email attacks and analyzing incidents to extract details such as sender identity, mail server, sender's IP address, and location, a more appropriate tool would be one that specializes in analyzing and extracting detailed header information from emails, providing insights into the path an email took across the internet. While Yesware can provide data related to email interactions, it might not offer the depth of forensic analysis required for incident investigation. Tools like email header analyzers, which are designed specifically for dissecting and interpreting email headers, would be more fitting. In the absence of a direct match from the given options, the description might imply a broader interpretation of tools like Yesware in context but traditionally, tools specifically designed for email forensics would be sought after for this task.

by Lashawn at Apr 08, 2025, 12:02 AM

Limited Time Offer

25%

Off

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tasia

2 months ago

I agree, Sharp seems like the right tool for this task.

upvoted 0 times

...

Stevie

2 months ago

Definitely not Clamwin, that's for antivirus, not email forensics.

upvoted 0 times

...

Clement

3 months ago

Wait, can Sharp really provide all that info? Sounds too good to be true!

upvoted 0 times

...

Grover

3 months ago

Logly could help with logs, but not sure it's the best choice here.

upvoted 0 times

...

Kandis

3 months ago

I think he should use Sharp for email analysis.

upvoted 0 times

...

Loren

3 months ago

Sharp sounds familiar, but I can't recall if it's specifically for email investigations. I need to double-check my notes!

upvoted 0 times

...

Ernie

4 months ago

I'm a bit confused; I thought Clamwin was more for antivirus purposes. Would it really help in this situation?

upvoted 0 times

...

Kallie

4 months ago

I remember practicing with similar questions, and I think Logly could be the right choice since it deals with logs and analytics.

upvoted 0 times

...

Tamesha

4 months ago

I think Harry might need a tool that specializes in email analysis, but I'm not sure which one fits best.

upvoted 0 times

...

Karon

4 months ago

Hmm, I'm not familiar with Sharp. Clamwin is an antivirus tool, so that's probably not the right choice. Yesware is for email tracking, which doesn't seem relevant here. I think I'm going to go with Logly - it sounds like the most appropriate tool based on the question.

upvoted 0 times

...

Omega

4 months ago

Okay, let's think this through. Harry needs to extract the sender's identity, mail server, IP address, and location. That sounds like the kind of information you'd get from a digital forensics tool, not a general email client. I'd go with Sharp for this task.

upvoted 0 times

...

Beula

5 months ago

I'm a bit unsure about this one. Is Logly the right tool for the job? I feel like there might be a more specialized tool for analyzing email incidents and tracing the sender's information.

upvoted 0 times

...

Louis

5 months ago

Hmm, this seems like a pretty straightforward question. I think the tool I'd use here is Logly - it's designed for email analysis and should be able to extract all the key details Harry needs.

upvoted 0 times

...

Dean

9 months ago

Harry should just ask the email provider for the details. Seems like a waste of time trying to figure it out on his own. But if I had to choose, I'd go with Option D, Sharp.

upvoted 0 times

Dalene

8 months ago

User3: I agree, Sharp seems like the right tool for the job.

upvoted 0 times

...

Marta

9 months ago

User2: Option D, Sharp, would be a good choice.

upvoted 0 times

...

Dortha

9 months ago

User1: Harry should just ask the email provider for the details.

upvoted 0 times

...

Jimmie

10 months ago

Who names these tools? Yesware and Logly? Really? I'm going with Option D, Sharp, because at least it sounds like it might do the job.

upvoted 0 times

Bernadine

9 months ago

Cammy: Let's go with Option D then, Sharp it is.

upvoted 0 times

...

Cammy

9 months ago

User 2: I think so too, it does sound like it could get the job done.

upvoted 0 times

...

Shawna

10 months ago

User 1: I agree, Sharp sounds like a reliable tool for this task.

upvoted 0 times

...

Jerry

10 months ago

Hmm, I'm not too sure about these options. Isn't there a tool specifically designed for email forensics? I feel like that would be the best choice here.

upvoted 0 times

Hershel

8 months ago

I agree, using specialized tools like EnCase or FTK would make the investigation more efficient.

upvoted 0 times

...

Antione

8 months ago

Yeah, those tools are more focused on forensic analysis and would provide better results.

upvoted 0 times

...

Annice

8 months ago

EnCase or FTK would definitely be more suitable for this task.

upvoted 0 times

...

Tayna

8 months ago

There are tools like EnCase or FTK that are specifically designed for email forensics.

upvoted 0 times

...

Ivette

9 months ago

D) Sharp

upvoted 0 times

...

Lonna

9 months ago

C) Yesware

upvoted 0 times

...

Kiera

9 months ago

B) Logly

upvoted 0 times

...

Nana

10 months ago

A) Clamwin

upvoted 0 times

...

Emeline

10 months ago

I'm going with Option A, Clamwin. It's a good antivirus tool that can scan for malware and potentially reveal some information about the attack.

upvoted 0 times

Melinda

9 months ago

Yes, Clamwin is known for its malware scanning capabilities. It could definitely help in this situation.

upvoted 0 times

...

Silvana

10 months ago

I think Clamwin is a good choice too. It can help with malware detection.

upvoted 0 times

...

Rasheeda

11 months ago

I'm not sure, but I think Clamwin could also be useful for this task.

upvoted 0 times

...

James

11 months ago

I agree with Davida, Logly is a good tool for extracting information like sender identity and IP address.

upvoted 0 times

...

Willard

11 months ago

Option D, Sharp, seems like the right tool for the job. It can help extract crucial details about the email attack, like the sender's identity and location.

upvoted 0 times