Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

EC-Council 212-89 Exam - Topic 2 Question 27 Discussion

Posted by Lizette on Jun 17, 2022 at 04:08 PM

The following steps describe the key activities in forensic readiness planning:

1. Train the staff to handle the incident and preserve the evidence

2. Create a special process for documenting the procedure

3. Identify the potential evidence required for an incident

4. Determine the source of the evidence

5. Establish a legal advisory board to guide the investigation process

6. Identify if the incident requires full or formal investigation

7. Establish a policy for securely handling and storing the collected evidence

8. Define a policy that determines the pathway to legally extract electronic evidence

with minimal disruption

Identify the correct sequence of steps involved in forensic readiness planning.

Suggested Answer: A

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
35 comments · newest first
RO
Rosendo 11 months ago
I'm surprised there's no mention of incident response plans here.
CA
Carman 11 months ago
Totally agree, training staff is the first step!
MA
Maynard 12 months ago
Wait, how can you establish a legal board before identifying evidence?
LU
Luisa 12 months ago
I think option D makes the most sense.
JE
Jeannetta 1 year ago
Step 1 is crucial for evidence preservation!
GW
Gwen 1 year ago
I’m leaning towards option D because it seems logical to train first, but I’m a bit confused about the order of the last few steps.
JU
Jules 1 year ago
I feel like identifying the evidence sources is crucial, but I can't recall if it should be before or after establishing the legal advisory board.
RO
Rolande 1 year ago
I remember a practice question that had a similar sequence, and I think documenting the procedure should come early on, maybe after training?
RE
Rebbecca 1 year ago
I think the first step should definitely be training the staff, but I'm not sure if it comes before identifying potential evidence.
AL
Aliza 1 year ago
This is a tricky one, as the exhibit doesn't provide much context. I'll need to rely on my knowledge of Cisco UCS and the PowerTool commands to make an educated guess.
AM
Amina 1 year ago
Okay, let's see. PDAs and smartphones are the most likely options here. I'm going to go with PDAs since they're more commonly supported by the Service Desk.
SE
Serina 1 year ago
This is a good question. I remember learning about this in class, but I'm drawing a blank on the specifics. I'll have to review my notes to refresh my memory on the proper procedure.
EL
Ellsworth 1 year ago
I'm stuck between 5 million and 10 million. I need to think about the usual utilization percentages we reviewed.
JI
Jina 1 year ago
I thought this was a test on how to properly dispose of a body. Clearly, I've been studying the wrong material.
MU
Muriel 1 year ago
↳ replying to Jina
Looks like we both need to brush up on our forensic readiness planning steps!
JE
Jenelle 1 year ago
↳ replying to Jina
Haha, yeah, definitely not about disposing bodies. It's more about preserving evidence and following proper procedures.
SE
Serina 1 year ago
↳ replying to Jina
Don't worry, forensic readiness planning is important for handling incidents in a professional manner.
JU
Junita 1 year ago
Forensic readiness planning? Sounds like a lot of work just to catch the office prankster who keeps stealing the coffee creamer.
BR
Brett 1 year ago
Option A looks like it was written by someone who has never actually done forensic readiness planning. I'm going to have to go with D.
MA
Martin 1 year ago
↳ replying to Brett
Definitely, D seems like the most practical sequence for forensic readiness planning.
MA
Marsha 1 year ago
↳ replying to Brett
Yeah, D seems to flow better in terms of handling incidents and preserving evidence.
IR
Irma 1 year ago
↳ replying to Brett
I think D makes more sense too. It follows a logical order for forensic readiness planning.
LA
Latosha 1 year ago
↳ replying to Brett
I agree, option A seems a bit off. D looks like the correct sequence.
LA
Lauryn 1 year ago
↳ replying to Brett
Definitely going with D for the correct sequence.
ES
Esteban 1 year ago
↳ replying to Brett
Yeah, D makes more sense in terms of the steps involved.
IS
Isaiah 1 year ago
↳ replying to Brett
I think D is the correct sequence too.
GL
Glendora 1 year ago
↳ replying to Brett
I agree, option A seems a bit off. D looks more logical.
OD
Odette 1 year ago
This question is trickier than it looks. I'm leaning towards option C, but I'm not completely sure.
AL
Alyce 1 year ago
Option B looks good to me. It starts with identifying the potential evidence and the source, which seems like a logical first step.
OM
Omega 1 year ago
I think option D is the correct sequence. It makes the most sense to train the staff first, then create the documentation process, and so on.
MA
Mammie 1 year ago
↳ replying to Omega
Yes, starting with training the staff and then following through with the other steps in order makes the most sense.
GE
German 1 year ago
↳ replying to Omega
I agree, option D seems like the most logical sequence for forensic readiness planning.
RA
Rashida 2 years ago
I'm not sure, but I think option C could also be a possible sequence.
RA
Ranee 2 years ago
I agree with Kristian, option A seems to be the most logical.
KR
Kristian 2 years ago
I think the correct sequence is option A.
0/2000 characters

Save Cancel