Discuss EC-Council 212-89 Exam Topic 4 Question 52

According to US-CERT; if an agency is unable to successfully mitigate a DOS attack it must be reported within:

AOne (1) hour of discovery/detection if the successful attack is still ongoing

BTwo (2) hours of discovery/detection if the successful attack is still ongoing

CThree (3) hours of discovery/detection if the successful attack is still ongoing

DFour (4) hours of discovery/detection if the successful attack is still ongoing

Suggested Answer: B

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

25 comments · newest first

Elly 11 months ago

Definitely one hour, gotta act quick in these situations!

Veda 11 months ago

I thought it was two hours, but I guess I was wrong.

Mozelle 11 months ago

Wait, is it really just one hour? That seems super fast!

Erasmo 12 months ago

Totally agree, that seems right!

Crista 12 months ago

It's one hour for reporting if the attack is ongoing.

Jonelle 1 year ago

I’m pretty confident it’s one hour. I recall that being emphasized in our last review session.

Chi 1 year ago

I feel like it’s three hours, but that seems a bit long for an ongoing attack. I wish I could remember the exact details from the study guide.

Oretha 1 year ago

I remember practicing a question about reporting timelines, and I thought it was two hours. I hope I’m not mixing it up with another topic.

German 1 year ago

I think it’s one hour for reporting a DOS attack, but I’m not completely sure. It feels like I read that somewhere.

Ivette 1 year ago

Ugh, I hate these types of questions about government regulations and reporting requirements. I'm going to take my best guess and move on.

Glenn 1 year ago

Okay, I've got this. The key information is that the agency must report the attack if they are unable to mitigate it. The question is asking about the timeline for reporting, so I'll focus on that.

Lovetta 1 year ago

Hmm, I'm a little unsure about this one. The question mentions US-CERT, but I'm not too familiar with their reporting guidelines. I'll have to think this through carefully.

Casandra 1 year ago

This seems like a straightforward question about reporting requirements for a DoS attack. I'll carefully read through the options and select the one that best matches the information provided.

Garry 1 year ago

This seems straightforward. The engineer just needs to enable the gRPC server and configure the necessary telemetry settings on the PE routers. I'm confident I can solve this one.

Nilsa 1 year ago

Role federation sounds like it could be the right answer, but I'm not 100% confident. I'll make sure to review the Splunk documentation before answering.

Xuan 1 year ago

Hmm, I'm not too sure about this one. I'll have to think it through carefully before answering.

Gayla 2 years ago

That makes sense, they need to be aware of any potential threats.

Terrilyn 2 years ago

According to US-CERT, if we can't mitigate it within 30 minutes, we have to report it.

Truman 2 years ago

But what if we can't mitigate the attack in time? Should we still report it?

Gayla 2 years ago

I agree, they can cause major disruptions. It's important to follow the guidelines.

Terrilyn 2 years ago

I think DOS attacks are serious, we need to report them quickly.

James 2 years ago

I'm not sure, but it makes sense to report it as soon as possible to prevent further damage.

Trina 2 years ago

I heard it's actually within 15 minutes.

Chaya 2 years ago

No, I believe it should be reported within 30 minutes.

Earlean 3 years ago

I think it must be reported in 1 hour.

EC-Council 212-89 Exam - Topic 4 Question 52 Discussion