Eccouncil Exam 212-89 Topic 3 Question 35 Discussion

Actual exam question for Eccouncil's 212-89 exam

Question #: 35
Topic #: 3

Which of the following tools helps incident handlers to view the file system, retrieve deleted data, perform timeline analysis, web artifacts, etc., during an incident response process?

AAutopsy

Bnetstat

CProcess Explorer

Dnblslal

Show Suggested Answer

Suggested Answer: A

by Stevie at Nov 17, 2022, 03:57 AM

Limited Time Offer

25%

Off

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Stanford

10 days ago

Autopsy is the way to go! It's like a digital forensic Swiss Army knife - can't beat that versatility.

upvoted 0 times

...

Marci

15 days ago

I'm not sure, but I think Autopsy makes sense for analyzing file systems and retrieving data.

upvoted 0 times

...

Dylan

23 days ago

I agree with Carissa, Autopsy is a forensic tool used for incident response.

upvoted 0 times

...

Carissa

26 days ago

I think the answer is A) Autopsy.

upvoted 0 times

...