Eccouncil 212-89 Exam - Topic 4 Question 74 Discussion

Actual exam question for Eccouncil's 212-89 exam

Question #: 74
Topic #: 4

Sam. an employee of a multinational company, sends emails to third-party organizations with a spoofed email address of his organization. How can you categorize this type of incident?

ANetwork intrusion incident

BInappropriate usage incident

CUnauthorized access incident.

DDenial-of-service incicent

Show Suggested Answer

Suggested Answer: A

Shally has incorporated the Defense-in-depth strategy into the incident response plan for Texas Pvt. Ltd. Defense-in-depth is a layered security approach that involves implementing multiple security measures and controls throughout an information system. This strategy is designed to provide several defensive barriers to protect against threats and attacks, ensuring that if one layer is compromised, others still provide protection. The goal is to create a multi-faceted defense that addresses potential vulnerabilities in various areas, including physical security, network security, application security, and user education. Reference: The Incident Handler (ECIH v3) courses and study guides often emphasize the importance of a Defense-in-depth strategy in creating robust security infrastructures to protect against a wide range of cyber threats.

by Detra at Jan 12, 2025, 08:28 PM

Limited Time Offer

25%

Off

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Karina

6 months ago

It's a clear violation of security policies, no doubt!

upvoted 0 times

...

Roslyn

6 months ago

Wait, is spoofing really that serious?

upvoted 0 times

...

Elfriede

6 months ago

Sounds more like unauthorized access to me.

upvoted 0 times

...

Rene

7 months ago

I agree, spoofing emails is misuse of company resources.

upvoted 0 times

...

Rodolfo

7 months ago

This is definitely an inappropriate usage incident.

upvoted 0 times

...

Dannette

7 months ago

I feel like this is definitely not a denial-of-service incident, but I’m torn between inappropriate usage and unauthorized access.

upvoted 0 times

...

Rosalind

7 months ago

This seems similar to a practice question we did on phishing, but I don't recall if it falls under network intrusion or something else.

upvoted 0 times

...

Mose

7 months ago

I'm not entirely sure, but I remember something about spoofing being linked to unauthorized access. Could it be that?

upvoted 0 times

...

Lino

8 months ago

I think this might be an inappropriate usage incident since Sam is misusing his company's email for unauthorized communication.

upvoted 0 times

...

Hillary

8 months ago

Network intrusion? Denial-of-service? I'm a bit confused on how to categorize this. I'll have to review the definitions of each incident type to make sure I'm choosing the right one.

upvoted 0 times

...

Marylou

8 months ago

Okay, I think I've got it. Since he's sending emails from a spoofed address, that's a form of impersonation, which would fall under the Inappropriate usage incident category. Option B is my pick.

upvoted 0 times

...

Oretha

8 months ago

Hmm, I'm not sure about this one. Could it also be considered an unauthorized access incident since he's using a spoofed email address? I'll have to think about that a bit more.

upvoted 0 times

...