Eccouncil Exam 212-89 Topic 2 Question 53 Discussion

Actual exam question for Eccouncil's 212-89 exam

Question #: 53
Topic #: 2

[All 212-89 Questions]

Which of the following methods help incident responders to reduce the false-positive

alert rates and further provide benefits of focusing on topmost priority issues reducing

potential risk and corporate liabilities?

AThreat profiling

BThreat contextualization

CThreat correlation

DThreat attribution

Show Suggested Answer

Suggested Answer: A

by Lorean at Apr 11, 2024, 11:09 AM

Limited Time Offer

25%

Off

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF

Comments

Submit Cancel

Vesta

17 hours ago

I agree, those three methods seem to be the most effective in addressing the problem. Threat profiling helps us understand the patterns and characteristics of the threats we're dealing with, while contextualization and correlation allow us to put those threats into the bigger picture and identify the ones that pose the greatest risk.

upvoted 0 times

...

Yvonne

2 days ago

This is a great question! Reducing false-positive alerts is crucial for incident responders, as it allows them to focus on the truly important issues and minimize the risk and liabilities for the organization. I think a combination of threat profiling, contextualization, and correlation would be the best approach here.

upvoted 0 times

...