312-39 Exam Questions and Answers | Exam-Dumps.net (Page: 1)

QUESTION: 1

Bonney's system has been compromised by a gruesome malware.
What is the primary step that is advisable to Bonney in order to contain the malware incident from spreading?

Complaint to police in a formal way regarding the incident
Turn off the infected machine
Leave it to the network administrators to handle
Call the legal department in the organization and inform about the incident

Answer(s): B

Reveal Solution Next Question

QUESTION: 2

According to the forensics investigation process, what is the next step carried out right after collecting the evidence?

Create a Chain of Custody Document
Send it to the nearby police station
Set a Forensic lab
Call Organizational Disciplinary Team

Answer(s): A

Reveal Solution Next Question

QUESTION: 3

Which one of the following is the correct flow for Setting Up a Computer Forensics Lab?

Planning and budgeting –> Physical location and structural design considerations –> Work area considerations –> Human resource considerations –> Physical security recommendations –> Forensics lab licensing
Planning and budgeting –> Physical location and structural design considerations–> Forensics lab licensing –> Human resource considerations –> Work area considerations –> Physical security recommendations
Planning and budgeting –> Forensics lab licensing –> Physical location and structural design considerations –> Work area considerations –> Physical security recommendations –> Human resource considerations
Planning and budgeting –> Physical location and structural design considerations –> Forensics lab licensing –>Work area considerations –> Human resource considerations –> Physical security recommendations

Answer(s): A

Reference:

https://info-savvy.com/setting-up-a-computer-forensics-lab/

Reveal Solution Next Question

QUESTION: 4

Which of the following directory will contain logs related to printer access?

/var/log/cups/Printer_log file
/var/log/cups/access_log file
/var/log/cups/accesslog file
/var/log/cups/Printeraccess_log file

Answer(s): A

Reveal Solution Next Question

QUESTION: 5

Which of the following command is used to enable logging in iptables?

$ iptables -B INPUT -j LOG
$ iptables -A OUTPUT -j LOG
$ iptables -A INPUT -j LOG
$ iptables -B OUTPUT -j LOG

Answer(s): B

Reference:

https://tecadmin.net/enable-logging-in-iptables-on-linux/

Reveal Solution Next Question

EC-Council 312-39 Exam (page: 1)
EC-Council Certified SOC Analyst
Updated on: 25-Sep-2025

Access free 312-39 actual exam questions, answers, explanations and user discussions.

QUESTION: 1

QUESTION: 2

QUESTION: 3

Reference:

QUESTION: 4

QUESTION: 5

Reference:

EC-Council 312-39 Exam (page: 1) EC-Council Certified SOC Analyst Updated on: 25-Sep-2025

Access free 312-39 actual exam questions, answers, explanations and user discussions.

QUESTION: 1

QUESTION: 2

QUESTION: 3

Reference:

QUESTION: 4

QUESTION: 5

Reference:

EC-Council 312-39 Exam (page: 1)
EC-Council Certified SOC Analyst
Updated on: 25-Sep-2025