Eccouncil 312-38 Exam - Topic 2 Question 92 Discussion

Actual exam question for Eccouncil's 312-38 exam

Question #: 92
Topic #: 2

You are monitoring your network traffic with the Wireshark utility and noticed that your network is experiencing a large amount of traffic from certain region. You suspect a DoS incident on the network.

What will be your first reaction as a first responder?

ADisable Virus Protection

BMake an initial assessment

CCommunicate the incident

DAvoid Fear, Uncertainty and Doubt

Show Suggested Answer

Suggested Answer: B

As a first responder to a suspected DoS incident, the initial step is to make an assessment of the situation. This involves analyzing the network traffic using tools like Wireshark to confirm the nature of the traffic and determine if it is indeed a DoS attack.The assessment will help in understanding the scope and impact of the incident and is crucial for deciding the subsequent steps in the response process123.

by Kerry at Sep 14, 2024, 04:33 AM

Limited Time Offer

25%

Off

Get Premium 312-38 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rana

8 months ago

Yeah, assessing the situation helps in making informed decisions.

upvoted 0 times

...

Roslyn

8 months ago

Avoiding fear, uncertainty, and doubt is key in these situations.

upvoted 0 times

...

Eliz

8 months ago

Surprised that disabling virus protection is even an option here!

upvoted 0 times

...

Glenn

8 months ago

I disagree, communicating the incident should be the priority.

upvoted 0 times

...

Krystina

8 months ago

Definitely make an initial assessment first!

upvoted 0 times

...

Dottie

9 months ago

I vaguely recall something about avoiding fear, uncertainty, and doubt, but I'm not sure how that applies here. Shouldn't we act quickly?

upvoted 0 times

...

Brunilda

9 months ago

I feel like disabling virus protection could make things worse. We should probably avoid that option altogether.

upvoted 0 times

...

Vincent

9 months ago

I'm not entirely sure, but I think communicating the incident to the team is crucial. We need everyone on the same page, right?

upvoted 0 times

...

Raymon

9 months ago

I remember that in our practice sessions, we always emphasized making an initial assessment before taking any drastic actions.

upvoted 0 times

...

Elenora

9 months ago

Okay, let's see. I think the key is to avoid panic and stay focused. Making an initial assessment sounds like the best first step to get a handle on the situation before taking any major actions.

upvoted 0 times

...

Marsha

9 months ago

Hmm, this is a tricky one. I'm a bit confused about whether I should communicate the incident right away or try to gather more information first. I'll need to think this through carefully.

upvoted 0 times

...

Cherelle

9 months ago

I'm pretty confident I know the right approach here. I'd start by making an initial assessment to understand the scope and nature of the incident.

upvoted 0 times

...

Temeka

9 months ago

Disabling virus protection? No way, that's the last thing I'd do. My first reaction would be to communicate the incident to the appropriate teams so we can coordinate a response.

upvoted 0 times

...

Lonny

2 years ago

This question is a real head-scratcher. I'm imagining the network admin just staring at the Wireshark display, muttering 'Oh no, not again!'

upvoted 0 times

...

Toi

2 years ago

B) Make an initial assessment, for sure. Wouldn't want to jump the gun and mess things up even more. Gotta gather intel first.

upvoted 0 times

...

Vi

2 years ago

D) Avoid Fear, Uncertainty and Doubt? Pfft, I'm not going to just sit back and pretend everything's fine when the network's under attack. Gotta take action!

upvoted 0 times

...

Chandra

2 years ago

C) Communicate the incident? Well, yeah, you gotta let the higher-ups know what's happening. Can't just sit on this and hope it goes away.

upvoted 0 times

Kattie

2 years ago

D) Avoid Fear, Uncertainty and Doubt

upvoted 0 times

...

Lanie

2 years ago

C) Communicate the incident

upvoted 0 times

...

Jennifer

2 years ago

B) Make an initial assessment

upvoted 0 times

...

Audra

2 years ago

A) Disable Virus Protection

upvoted 0 times

...

Anthony

2 years ago

B) Make an initial assessment? Duh, that's the logical first step. Can't just go around disabling important security measures without knowing what's going on.

upvoted 0 times

Jannette

2 years ago

User3: Communication is key, we should inform the necessary parties about the incident.

upvoted 0 times

...

Katlyn

2 years ago

User2: Agreed, we need to gather more information before taking any action.

upvoted 0 times

...

Cheryl

2 years ago

User1: Let's make an initial assessment to understand the situation.

upvoted 0 times

...

Talia

2 years ago

D) Avoid Fear, Uncertainty and Doubt - Definitely the way to go. Stay calm, be the hero this network needs.

upvoted 0 times

Glenna

2 years ago

D) Avoid Fear, Uncertainty and Doubt

upvoted 0 times

...

Sunny

2 years ago

C) Communicate the incident

upvoted 0 times

...

Leigha

2 years ago

D) Avoid Fear, Uncertainty and Doubt

upvoted 0 times

...

Annabelle

2 years ago

B) Make an initial assessment

upvoted 0 times

...

Hassie

2 years ago

C) Communicate the incident

upvoted 0 times

...

Natalie

2 years ago

B) Make an initial assessment

upvoted 0 times

...

Hyun

2 years ago

I think communicating the incident should also be a priority to coordinate a response.

upvoted 0 times

...

Elke

2 years ago

I agree with Misty, assessing the situation is crucial.

upvoted 0 times

...

Misty

2 years ago

I would make an initial assessment.

upvoted 0 times

...

Corrie

2 years ago

Whoa, this is like a video game level where you gotta stop the DDoS boss! I'd go with B) and make sure I don't accidentally enable the cheat codes... I mean, virus protection.

upvoted 0 times

Darrin

2 years ago

Let's stay calm and avoid spreading fear, uncertainty, and doubt.

upvoted 0 times

...

Dante

2 years ago

Once we know what we're dealing with, we can communicate the incident to the team.

upvoted 0 times

...

Karon

2 years ago

Good idea, we need to figure out the extent of the incident.

upvoted 0 times

...

Mariann

2 years ago

I'd go with B) and make an initial assessment.

upvoted 0 times

...

Tarra

2 years ago

C) Communicate the incident - Alerting the team is key. Can't tackle this alone, need all hands on deck.

upvoted 0 times

...

Izetta

2 years ago

B) Make an initial assessment - Gotta gather intel before jumping into action. Disabling virus protection is a big no-no, and uncertainty won't help anyone.

upvoted 0 times

Blondell

2 years ago

C) Communicate the incident - Keeping everyone in the loop is crucial in handling the situation effectively.

upvoted 0 times

...

Charlie

2 years ago

B) Make an initial assessment - Gotta gather intel before jumping into action.

upvoted 0 times

...