Discuss EC-Council 212-89 Exam Topic 5 Question 7

During the vulnerability assessment phase, the incident responders perform various

steps as below:

1. Run vulnerability scans using tools

2. Identify and prioritize vulnerabilities

3. Examine and evaluate physical security

4. Perform OSINT information gathering to validate the vulnerabilities

5. Apply business and technology context to scanner results

6. Check for misconfigurations and human errors

7. Create a vulnerability scan report

Identify the correct sequence of vulnerability assessment steps performed by the

incident responders.

A3-->6-->1-->2-->5-->4-->7

B1-->3-->2-->4-->5-->6-->7

C4-->1-->2-->3-->6-->5-->7

D2-->1-->4-->7-->5-->6-->3

Suggested Answer: A

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

37 comments · newest first

Leandro 12 months ago

Not sure about that sequence, feels a bit mixed up.

An 12 months ago

Totally agree with the order in option B!

Santos 12 months ago

Wait, why is physical security step 3? That seems off.

Heidy 1 year ago

I think prioritizing vulnerabilities should come before anything else.

Juliann 1 year ago

Step 1 is definitely the first thing to do!

Nicolette 1 year ago

I feel like evaluating physical security should happen early on, but I’m not sure how it fits with the other steps in the sequence.

Nikita 1 year ago

I practiced a similar question where the sequence started with vulnerability scans, so I’m leaning towards option B, but I’m not completely confident.

Leonardo 1 year ago

I think we should prioritize vulnerabilities after identifying them, but I can't recall if OSINT gathering is done before or after that step.

Mireya 1 year ago

I remember that the first step usually involves running the scans, but I'm not sure if physical security comes before or after that.

Dahlia 1 year ago

I've got this! The technician would use the Product Transfer tool to move the unused circuit board back to the warehouse, and the Return Order tool to officially document the return.

Corazon 1 year ago

I think the just-in-time purchase environment in option A would benefit the most from EDI. The speed and efficiency of electronic data exchange could really help with those time-sensitive orders.

Moon 1 year ago

Hmm, I'm a bit confused by the different cloud capabilities. I'll need to make sure I understand the differences between IaaS and PaaS, and how that impacts the requirements.

Tori 1 year ago

I'm a bit confused about whether you can just change the Mouse Button value to 'Close' or if we actually need to create a new element entirely.

Sharan 1 year ago

I feel like increasing the safety of exercise is related, but maybe that's just a part of the broader goal of risk stratification?

Marcelle 1 year ago

Haha, imagine if the incident responders just randomly jumped around between the steps. 'Oh, let's do physical security, then check for misconfigurations, then maybe run a scan or two?' Sounds like a recipe for disaster.

Aleisha 1 year ago

↳ replying to Marcelle

C) 4-->1-->2-->3-->6-->5-->7 would definitely lead to confusion and inefficiency.

Staci 1 year ago

↳ replying to Marcelle

B) 1-->3-->2-->4-->5-->6-->7 is the correct sequence to follow for a successful vulnerability assessment.

Mose 1 year ago

↳ replying to Marcelle

A) 3-->6-->1-->2-->5-->4-->7 sounds like a much more organized approach.

Lewis 1 year ago

I'm going with Option B. Gotta love a nice, linear progression of steps. Much easier to follow than some of these other convoluted sequences.

Aretha 1 year ago

↳ replying to Lewis

Definitely, it's important to have a logical sequence in vulnerability assessment.

Glory 1 year ago

↳ replying to Lewis

I prefer clear steps like Option B. It's more organized.

Nelida 1 year ago

↳ replying to Lewis

Yeah, Option B seems like the most efficient way to conduct a vulnerability assessment.

Precious 1 year ago

↳ replying to Lewis

I agree, following a linear progression of steps definitely helps in staying organized.

Ma 1 year ago

↳ replying to Lewis

Yeah, I agree. It's easier to follow a linear progression.

Celeste 1 year ago

↳ replying to Lewis

I think Option B makes the most sense too. It's straightforward.

Merissa 1 year ago

↳ replying to Lewis

I think Option B makes the most sense too. It's straightforward and logical.

Desiree 1 year ago

↳ replying to Lewis

Definitely, makes the process more organized.

Darnell 1 year ago

↳ replying to Lewis

I agree, it's easier to follow a linear sequence.

Lashawnda 1 year ago

↳ replying to Lewis

Yeah, it seems like a logical progression of steps.

Lezlie 1 year ago

↳ replying to Lewis

I think Option B is the right sequence.

Terry 1 year ago

Wait, why are we checking physical security during a vulnerability assessment? That's a bit out of place, don't you think?

Samira 2 years ago

Option B seems to be the correct sequence. Vulnerability scanning should come before identifying and prioritizing the vulnerabilities.

Shawn 1 year ago

↳ replying to Samira

I agree, scanning should definitely come before prioritizing vulnerabilities.

Azzie 1 year ago

↳ replying to Samira

I think option B is correct. Scanning first makes sense.

Stevie 2 years ago

I see your point, but I still think A) makes more sense because it prioritizes vulnerabilities early on.

Pamella 2 years ago

I disagree, I believe the correct sequence is B) 1-->3-->2-->4-->5-->6-->7.

Stevie 2 years ago

I think the correct sequence is A) 3-->6-->1-->2-->5-->4-->7.

EC-Council 212-89 Exam - Topic 5 Question 7 Discussion