Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Eccouncil 212-89 Exam - Topic 2 Question 27 Discussion

Actual exam question for Eccouncil's 212-89 exam
Question #: 27
Topic #: 2
[All 212-89 Questions]

The following steps describe the key activities in forensic readiness planning:

1. Train the staff to handle the incident and preserve the evidence

2. Create a special process for documenting the procedure

3. Identify the potential evidence required for an incident

4. Determine the source of the evidence

5. Establish a legal advisory board to guide the investigation process

6. Identify if the incident requires full or formal investigation

7. Establish a policy for securely handling and storing the collected evidence

8. Define a policy that determines the pathway to legally extract electronic evidence

with minimal disruption

Identify the correct sequence of steps involved in forensic readiness planning.

Show Suggested Answer Hide Answer
Suggested Answer: A

by Lizette at Jun 17, 2022, 04:08 PM

Limited Time Offer

25%

Off

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Rosendo
7 months ago
I'm surprised there's no mention of incident response plans here.
upvoted 0 times
...
Carman
7 months ago
Totally agree, training staff is the first step!
upvoted 0 times
...
Maynard
7 months ago
Wait, how can you establish a legal board before identifying evidence?
upvoted 0 times
...
Luisa
7 months ago
I think option D makes the most sense.
upvoted 0 times
...
Jeannetta
8 months ago
Step 1 is crucial for evidence preservation!
upvoted 0 times
...
Gwen
8 months ago
I’m leaning towards option D because it seems logical to train first, but I’m a bit confused about the order of the last few steps.
upvoted 0 times
...
Jules
8 months ago
I feel like identifying the evidence sources is crucial, but I can't recall if it should be before or after establishing the legal advisory board.
upvoted 0 times
...
Rolande
8 months ago
I remember a practice question that had a similar sequence, and I think documenting the procedure should come early on, maybe after training?
upvoted 0 times
...
Rebbecca
8 months ago
I think the first step should definitely be training the staff, but I'm not sure if it comes before identifying potential evidence.
upvoted 0 times
...
Aliza
8 months ago
This is a tricky one, as the exhibit doesn't provide much context. I'll need to rely on my knowledge of Cisco UCS and the PowerTool commands to make an educated guess.
upvoted 0 times
...
Amina
8 months ago
Okay, let's see. PDAs and smartphones are the most likely options here. I'm going to go with PDAs since they're more commonly supported by the Service Desk.
upvoted 0 times
...
Serina
8 months ago
This is a good question. I remember learning about this in class, but I'm drawing a blank on the specifics. I'll have to review my notes to refresh my memory on the proper procedure.
upvoted 0 times
...
Ellsworth
8 months ago
I'm stuck between 5 million and 10 million. I need to think about the usual utilization percentages we reviewed.
upvoted 0 times
...
Jina
1 year ago
I thought this was a test on how to properly dispose of a body. Clearly, I've been studying the wrong material.
upvoted 0 times
Muriel
12 months ago
Looks like we both need to brush up on our forensic readiness planning steps!
upvoted 0 times
...
Jenelle
1 year ago
Haha, yeah, definitely not about disposing bodies. It's more about preserving evidence and following proper procedures.
upvoted 0 times
...
Serina
1 year ago
Don't worry, forensic readiness planning is important for handling incidents in a professional manner.
upvoted 0 times
...
...
Junita
1 year ago
Forensic readiness planning? Sounds like a lot of work just to catch the office prankster who keeps stealing the coffee creamer.
upvoted 0 times
...
Brett
1 year ago
Option A looks like it was written by someone who has never actually done forensic readiness planning. I'm going to have to go with D.
upvoted 0 times
Martin
11 months ago
Definitely, D seems like the most practical sequence for forensic readiness planning.
upvoted 0 times
...
Marsha
12 months ago
Yeah, D seems to flow better in terms of handling incidents and preserving evidence.
upvoted 0 times
...
Irma
12 months ago
I think D makes more sense too. It follows a logical order for forensic readiness planning.
upvoted 0 times
...
Latosha
12 months ago
I agree, option A seems a bit off. D looks like the correct sequence.
upvoted 0 times
...
Lauryn
1 year ago
Definitely going with D for the correct sequence.
upvoted 0 times
...
Esteban
1 year ago
Yeah, D makes more sense in terms of the steps involved.
upvoted 0 times
...
Isaiah
1 year ago
I think D is the correct sequence too.
upvoted 0 times
...
Glendora
1 year ago
I agree, option A seems a bit off. D looks more logical.
upvoted 0 times
...
...
Odette
1 year ago
This question is trickier than it looks. I'm leaning towards option C, but I'm not completely sure.
upvoted 0 times
...
Alyce
1 year ago
Option B looks good to me. It starts with identifying the potential evidence and the source, which seems like a logical first step.
upvoted 0 times
...
Omega
1 year ago
I think option D is the correct sequence. It makes the most sense to train the staff first, then create the documentation process, and so on.
upvoted 0 times
Mammie
1 year ago
Yes, starting with training the staff and then following through with the other steps in order makes the most sense.
upvoted 0 times
...
German
1 year ago
I agree, option D seems like the most logical sequence for forensic readiness planning.
upvoted 0 times
...
...
Rashida
1 year ago
I'm not sure, but I think option C could also be a possible sequence.
upvoted 0 times
...
Ranee
1 year ago
I agree with Kristian, option A seems to be the most logical.
upvoted 0 times
...
Kristian
1 year ago
I think the correct sequence is option A.
upvoted 0 times
...

Save Cancel