Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Eccouncil Exam 212-89 Topic 4 Question 77 Discussion

Actual exam question for Eccouncil's 212-89 exam
Question #: 77
Topic #: 4
[All 212-89 Questions]

An organization's customers are experiencing either slower network communication or unavailability of services. In addition, network administrators are receiving alerts from security tools such as IDS/IPS and firewalls about a possible DoS/DDoS attack. In result, the organization requests the incident handling and response (IH&R) team further investigates the incident. The IH&R team decides to use manual techniques to detect DoS/DDoS attack.

Which of the following commands helps the IH&R team to manually detect DoS/DDoS attack?

Show Suggested Answer Hide Answer
Suggested Answer: B

Email Dossier is a tool designed to perform detailed investigations on email messages to verify their authenticity and trace their origin. It can analyze email headers and provide information about the route an email has taken, the servers it passed through, and potentially malicious links or origins. For an incident handler like Stenley, tasked with verifying the validity of emails and containing malicious email threats, Email Dossier serves as a practical tool for analyzing and validating emails received by employees. By using this tool, Stenley can identify fraudulent or suspicious emails, thereby helping to protect the organization from phishing attacks, malware distribution, and other email-based threats.


Contribute your Thoughts:

Gilma
1 months ago
I hope the IH&R team remembers to bring their magnifying glasses and deerstalker hats for this 'manual' DoS/DDoS detection. Elementary, my dear Watson!
upvoted 0 times
...
Sommer
1 months ago
I bet the person who wrote this question was just trying to trip us up with those 'nbtstat' options. C all the way!
upvoted 0 times
Lawana
8 days ago
C) netstat an
upvoted 0 times
...
...
Carolynn
2 months ago
Option D, 'nbtstat/S', sounds like it's made up. I'm going to have to go with C, 'netstat an', as the best choice here.
upvoted 0 times
Sunny
19 days ago
Yeah, 'nbtstat/S' does seem unfamiliar. 'netstat an' is a safer bet for detecting attacks.
upvoted 0 times
...
Dewitt
22 days ago
I'm not sure about option D, 'nbtstat/S', it does sound a bit suspicious.
upvoted 0 times
...
Cordelia
24 days ago
I agree, 'netstat an' is a commonly used command for network monitoring.
upvoted 0 times
...
Rory
1 months ago
I think option C, 'netstat an', is the best choice for detecting DoS/DDoS attacks.
upvoted 0 times
...
...
Nu
2 months ago
That makes sense, netstat an would provide more detailed information for detecting DoS/DDoS attacks.
upvoted 0 times
...
Lashon
2 months ago
I'm not sure about the answer, but I know that 'nbtstat' is used for NetBIOS over TCP/IP, which doesn't seem relevant to this scenario. I'd go with C or A.
upvoted 0 times
Daron
17 days ago
Yeah, I agree. netstat an could also be useful in this situation.
upvoted 0 times
...
Daron
18 days ago
I think netstat -r could help detect the DoS/DDoS attack.
upvoted 0 times
...
...
Glynda
2 months ago
I disagree, I believe the correct command is netstat an because it shows all connections and listening ports.
upvoted 0 times
...
Ronald
2 months ago
I think option C, 'netstat an', is the correct answer. It provides detailed information about network connections, which can help detect DoS/DDoS attacks.
upvoted 0 times
Jesusita
16 days ago
I'm not sure about 'nbtstat/S', it doesn't seem like the right command for this situation.
upvoted 0 times
...
Kris
17 days ago
I believe 'nbtstat /c' is not relevant for detecting such attacks.
upvoted 0 times
...
Julianna
21 days ago
I think 'netstat -r' could also be useful in detecting DoS/DDoS attacks.
upvoted 0 times
...
Earleen
1 months ago
I agree, 'netstat an' can provide valuable information about network connections.
upvoted 0 times
...
...
Nu
2 months ago
I think the command that helps detect DoS/DDoS attack is netstat -r.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77