Eccouncil 312-38 Exam - Topic 2 Question 92 Discussion

Actual exam question for Eccouncil's 312-38 exam

Question #: 92
Topic #: 2

You are monitoring your network traffic with the Wireshark utility and noticed that your network is experiencing a large amount of traffic from certain region. You suspect a DoS incident on the network.

What will be your first reaction as a first responder?

ADisable Virus Protection

BMake an initial assessment

CCommunicate the incident

DAvoid Fear, Uncertainty and Doubt

Show Suggested Answer

Suggested Answer: B

As a first responder to a suspected DoS incident, the initial step is to make an assessment of the situation. This involves analyzing the network traffic using tools like Wireshark to confirm the nature of the traffic and determine if it is indeed a DoS attack.The assessment will help in understanding the scope and impact of the incident and is crucial for deciding the subsequent steps in the response process123.

by Kerry at Sep 14, 2024, 04:33 AM

Limited Time Offer

25%

Off

Get Premium 312-38 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rana

3 months ago

Yeah, assessing the situation helps in making informed decisions.

upvoted 0 times

...

Roslyn

3 months ago

Avoiding fear, uncertainty, and doubt is key in these situations.

upvoted 0 times

...

Eliz

3 months ago

Surprised that disabling virus protection is even an option here!

upvoted 0 times

...

Glenn

4 months ago

I disagree, communicating the incident should be the priority.

upvoted 0 times

...

Krystina

4 months ago

Definitely make an initial assessment first!

upvoted 0 times

...

Dottie

4 months ago

I vaguely recall something about avoiding fear, uncertainty, and doubt, but I'm not sure how that applies here. Shouldn't we act quickly?

upvoted 0 times

...

Brunilda

4 months ago

I feel like disabling virus protection could make things worse. We should probably avoid that option altogether.

upvoted 0 times

...

Vincent

4 months ago

I'm not entirely sure, but I think communicating the incident to the team is crucial. We need everyone on the same page, right?

upvoted 0 times

...

Raymon

5 months ago

I remember that in our practice sessions, we always emphasized making an initial assessment before taking any drastic actions.

upvoted 0 times

...

Elenora

5 months ago

Okay, let's see. I think the key is to avoid panic and stay focused. Making an initial assessment sounds like the best first step to get a handle on the situation before taking any major actions.

upvoted 0 times

...

Marsha

5 months ago

Hmm, this is a tricky one. I'm a bit confused about whether I should communicate the incident right away or try to gather more information first. I'll need to think this through carefully.

upvoted 0 times

...

Cherelle

5 months ago

I'm pretty confident I know the right approach here. I'd start by making an initial assessment to understand the scope and nature of the incident.

upvoted 0 times

...

Temeka

5 months ago

Disabling virus protection? No way, that's the last thing I'd do. My first reaction would be to communicate the incident to the appropriate teams so we can coordinate a response.

upvoted 0 times

...

Lonny

1 year ago

This question is a real head-scratcher. I'm imagining the network admin just staring at the Wireshark display, muttering 'Oh no, not again!'

upvoted 0 times

...

Toi

1 year ago

B) Make an initial assessment, for sure. Wouldn't want to jump the gun and mess things up even more. Gotta gather intel first.

upvoted 0 times

...

Vi

1 year ago

D) Avoid Fear, Uncertainty and Doubt? Pfft, I'm not going to just sit back and pretend everything's fine when the network's under attack. Gotta take action!

upvoted 0 times

...

Chandra

1 year ago

C) Communicate the incident? Well, yeah, you gotta let the higher-ups know what's happening. Can't just sit on this and hope it goes away.

upvoted 0 times

Kattie

1 year ago

D) Avoid Fear, Uncertainty and Doubt

upvoted 0 times

...

Lanie

1 year ago

C) Communicate the incident

upvoted 0 times

...

Jennifer

1 year ago

B) Make an initial assessment

upvoted 0 times

...

Audra

1 year ago

A) Disable Virus Protection

upvoted 0 times

...

Anthony

1 year ago

B) Make an initial assessment? Duh, that's the logical first step. Can't just go around disabling important security measures without knowing what's going on.

upvoted 0 times

Jannette

1 year ago

User3: Communication is key, we should inform the necessary parties about the incident.

upvoted 0 times

...

Katlyn

1 year ago

User2: Agreed, we need to gather more information before taking any action.

upvoted 0 times

...

Cheryl

1 year ago

User1: Let's make an initial assessment to understand the situation.

upvoted 0 times

...

Talia

1 year ago

D) Avoid Fear, Uncertainty and Doubt - Definitely the way to go. Stay calm, be the hero this network needs.

upvoted 0 times

Glenna

1 year ago

D) Avoid Fear, Uncertainty and Doubt

upvoted 0 times

...

Sunny

1 year ago

C) Communicate the incident

upvoted 0 times

...

Leigha

1 year ago

D) Avoid Fear, Uncertainty and Doubt

upvoted 0 times

...

Annabelle

1 year ago

B) Make an initial assessment

upvoted 0 times

...

Hassie

1 year ago

C) Communicate the incident

upvoted 0 times

...

Natalie

1 year ago

B) Make an initial assessment

upvoted 0 times

...

Hyun

1 year ago

I think communicating the incident should also be a priority to coordinate a response.

upvoted 0 times

...

Elke

1 year ago

I agree with Misty, assessing the situation is crucial.

upvoted 0 times

...

Misty

1 year ago

I would make an initial assessment.

upvoted 0 times

...

Corrie

1 year ago

Whoa, this is like a video game level where you gotta stop the DDoS boss! I'd go with B) and make sure I don't accidentally enable the cheat codes... I mean, virus protection.

upvoted 0 times

Darrin

1 year ago

Let's stay calm and avoid spreading fear, uncertainty, and doubt.

upvoted 0 times

...

Dante

1 year ago

Once we know what we're dealing with, we can communicate the incident to the team.

upvoted 0 times

...

Karon

1 year ago

Good idea, we need to figure out the extent of the incident.

upvoted 0 times

...

Mariann

1 year ago

I'd go with B) and make an initial assessment.

upvoted 0 times

...

Tarra

1 year ago

C) Communicate the incident - Alerting the team is key. Can't tackle this alone, need all hands on deck.

upvoted 0 times

...

Izetta

1 year ago

B) Make an initial assessment - Gotta gather intel before jumping into action. Disabling virus protection is a big no-no, and uncertainty won't help anyone.

upvoted 0 times

Blondell

1 year ago

C) Communicate the incident - Keeping everyone in the loop is crucial in handling the situation effectively.

upvoted 0 times

...

Charlie

1 year ago

B) Make an initial assessment - Gotta gather intel before jumping into action.

upvoted 0 times

...