nerdexam
EC-Council

212-89 · Question #161

Eve's is an incident handler in ABC organization. One day, she got a complaint about email hacking incident from one of the employees of the organization. As a part of incident handling and response…

The correct answer is A. Restore the email services and change the password. The first step in securing an employee's account following an email hacking incident involves restoring access to the email services if necessary and immediately changing the password to prevent unauthorized access. This action ensures that the attacker is locked out of the…

Incident Handling and Response Process

Question

Eve's is an incident handler in ABC organization. One day, she got a complaint about email hacking incident from one of the employees of the organization. As a part of incident handling and response process, she must follow many recovery steps in order to recover from incident impact to maintain business continuity. What is the first step that she must do to secure employee account?

Options

  • ARestore the email services and change the password
  • BEnable two-factor authentication
  • CEnable scanning of links and attachments in all the emails
  • DDisabling automatic file sharing between the systems

How the community answered

(21 responses)
  • A
    90% (19)
  • B
    5% (1)
  • C
    5% (1)

Explanation

The first step in securing an employee's account following an email hacking incident involves restoring access to the email services if necessary and immediately changing the password to prevent unauthorized access. This action ensures that the attacker is locked out of the account as quickly as possible. While enabling two-factor authentication, scanning links and attachments, and disabling automatic file sharing are important security measures, they come into play after ensuring that the compromised account is first secured by changing its password to halt any ongoing unauthorized access.

Topics

#email incident recovery#account security#password reset#business continuity

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice