Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Eccouncil 312-38 Exam - Topic 7 Question 38 Discussion

Which of the following is not part of the recommended first response steps for network defenders?
D) Do not change the state of the suspected device
A) Restrict yourself from doing the investigation
B) Extract relevant data from the suspected devices as early as possible
C) Disable virus protection

Eccouncil 312-38 Exam - Topic 7 Question 38 Discussion

Actual exam question for Eccouncil's 312-38 exam
Question #: 38
Topic #: 7
[All 312-38 Questions]

Which of the following is not part of the recommended first response steps for network defenders?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Amie at May 04, 2022, 11:13 PM

Limited Time Offer

25%

Off

Get Premium 312-38 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Margot
8 months ago
Wait, are we really saying to not investigate? Sounds fishy.
upvoted 0 times
...
Ettie
9 months ago
I can't believe some people would think D is optional.
upvoted 0 times
...
Latrice
9 months ago
B is crucial, you need that data ASAP!
upvoted 0 times
...
Dominque
9 months ago
A seems off, why would you restrict yourself?
upvoted 0 times
...
Shaunna
9 months ago
Definitely not C, disabling virus protection is a bad idea!
upvoted 0 times
...
Dannette
9 months ago
I vaguely recall that extracting data early is important, which makes me lean towards A or C as the correct choice for what not to do.
upvoted 0 times
...
Johna
9 months ago
I practiced a similar question where disabling virus protection was definitely not recommended. So, I think C is the answer here.
upvoted 0 times
...
Apolonia
9 months ago
I'm a bit unsure about A. I feel like restricting investigation could be a good idea to avoid contamination, but it seems odd to include it as a step.
upvoted 0 times
...
Tegan
9 months ago
I remember something about not changing the state of the device being crucial, so I think D is definitely part of the steps.
upvoted 0 times
...
Vannessa
10 months ago
Wait, what's the IPCS SIP interface? I don't think I've heard of that before. This could be tricky.
upvoted 0 times
...
Pura
10 months ago
abc'||'test'||'drive', since that seems like the most concise way to combine the three strings.
upvoted 0 times
...
port_stack
4 years ago
The correct answer should be B - Extract relevant data from the suspected devices as early as possible. First Responder do not do any data extraction. It is done by the forensic team. Choices A, C and D are found in the list first responser steps for network defenders (do's and don'ts) Source - Certified Network Defender (CND) Version 2 eBook w/ iLabs (Volumes 1 through 4) Page 1457 - 1464
upvoted 1 times
...

Save Cancel