Eccouncil 212-89 Exam - Topic 2 Question 27 Discussion

Actual exam question for Eccouncil's 212-89 exam

Question #: 27
Topic #: 2

[All 212-89 Questions]

The following steps describe the key activities in forensic readiness planning:

1. Train the staff to handle the incident and preserve the evidence

2. Create a special process for documenting the procedure

3. Identify the potential evidence required for an incident

4. Determine the source of the evidence

5. Establish a legal advisory board to guide the investigation process

6. Identify if the incident requires full or formal investigation

7. Establish a policy for securely handling and storing the collected evidence

8. Define a policy that determines the pathway to legally extract electronic evidence

with minimal disruption

Identify the correct sequence of steps involved in forensic readiness planning.

A2-->3-->1-->4-->6-->5-->7-->8

B3-->4-->8-->7-->6-->1-->2-->5

C3-->1-->4-->5-->8-->2-->6-->7

D1-->2-->3-->4-->5-->6-->7-->8

Show Suggested Answer

Suggested Answer: A

by Lizette at Jun 17, 2022, 04:08 PM

Limited Time Offer

25%

Off

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rosendo

4 months ago

I'm surprised there's no mention of incident response plans here.

upvoted 0 times

...

Carman

4 months ago

Totally agree, training staff is the first step!

upvoted 0 times

...

Maynard

4 months ago

Wait, how can you establish a legal board before identifying evidence?

upvoted 0 times

...

Luisa

4 months ago

I think option D makes the most sense.

upvoted 0 times

...

Jeannetta

5 months ago

Step 1 is crucial for evidence preservation!

upvoted 0 times

...

Gwen

5 months ago

I’m leaning towards option D because it seems logical to train first, but I’m a bit confused about the order of the last few steps.

upvoted 0 times

...

Jules

5 months ago

I feel like identifying the evidence sources is crucial, but I can't recall if it should be before or after establishing the legal advisory board.

upvoted 0 times

...

Rolande

5 months ago

I remember a practice question that had a similar sequence, and I think documenting the procedure should come early on, maybe after training?

upvoted 0 times

...

Rebbecca

5 months ago

I think the first step should definitely be training the staff, but I'm not sure if it comes before identifying potential evidence.

upvoted 0 times

...

Aliza

5 months ago

This is a tricky one, as the exhibit doesn't provide much context. I'll need to rely on my knowledge of Cisco UCS and the PowerTool commands to make an educated guess.

upvoted 0 times

...

Amina

5 months ago

Okay, let's see. PDAs and smartphones are the most likely options here. I'm going to go with PDAs since they're more commonly supported by the Service Desk.

upvoted 0 times

...

Serina

5 months ago

This is a good question. I remember learning about this in class, but I'm drawing a blank on the specifics. I'll have to review my notes to refresh my memory on the proper procedure.

upvoted 0 times

...

Ellsworth

5 months ago

I'm stuck between 5 million and 10 million. I need to think about the usual utilization percentages we reviewed.

upvoted 0 times

...

Jina

10 months ago

I thought this was a test on how to properly dispose of a body. Clearly, I've been studying the wrong material.

upvoted 0 times

Muriel

9 months ago

Looks like we both need to brush up on our forensic readiness planning steps!

upvoted 0 times

...

Jenelle

10 months ago

Haha, yeah, definitely not about disposing bodies. It's more about preserving evidence and following proper procedures.

upvoted 0 times

...

Serina

10 months ago

Don't worry, forensic readiness planning is important for handling incidents in a professional manner.

upvoted 0 times

...

Junita

10 months ago

Forensic readiness planning? Sounds like a lot of work just to catch the office prankster who keeps stealing the coffee creamer.

upvoted 0 times

...

Brett

10 months ago

Option A looks like it was written by someone who has never actually done forensic readiness planning. I'm going to have to go with D.

upvoted 0 times

Martin

9 months ago

Definitely, D seems like the most practical sequence for forensic readiness planning.

upvoted 0 times

...

Marsha

9 months ago

Yeah, D seems to flow better in terms of handling incidents and preserving evidence.

upvoted 0 times

...

Irma

9 months ago

I think D makes more sense too. It follows a logical order for forensic readiness planning.

upvoted 0 times

...

Latosha

9 months ago

I agree, option A seems a bit off. D looks like the correct sequence.

upvoted 0 times

...

Lauryn

10 months ago

Definitely going with D for the correct sequence.

upvoted 0 times

...

Esteban

10 months ago

Yeah, D makes more sense in terms of the steps involved.

upvoted 0 times

...

Isaiah

10 months ago

I think D is the correct sequence too.

upvoted 0 times

...

Glendora

10 months ago

I agree, option A seems a bit off. D looks more logical.

upvoted 0 times

...

Odette

10 months ago

This question is trickier than it looks. I'm leaning towards option C, but I'm not completely sure.

upvoted 0 times

...

Alyce

11 months ago

Option B looks good to me. It starts with identifying the potential evidence and the source, which seems like a logical first step.

upvoted 0 times

...

Omega

11 months ago

I think option D is the correct sequence. It makes the most sense to train the staff first, then create the documentation process, and so on.

upvoted 0 times

Mammie

10 months ago

Yes, starting with training the staff and then following through with the other steps in order makes the most sense.

upvoted 0 times

...

German

10 months ago

I agree, option D seems like the most logical sequence for forensic readiness planning.

upvoted 0 times

...

Rashida

11 months ago

I'm not sure, but I think option C could also be a possible sequence.

upvoted 0 times

...

Ranee

11 months ago

I agree with Kristian, option A seems to be the most logical.

upvoted 0 times

...

Kristian

11 months ago

I think the correct sequence is option A.

upvoted 0 times

...