100-160 Question 132
Single answerAn organization has implemented a policy requiring all endpoint devices to have antivirus software installed and up-to-date. During a routine audit, a technician finds a laptop without antivirus software. What should the technician do to verify compliance with the organization's security policy?
- A
Install the organization's approved antivirus software and confirm it is up-to-date.
- B
Isolate the laptop from the network and report the issue to the cybersecurity team.
- C
Reboot the laptop to check if the antivirus software automatically installs.
- D
Ignore the issue since the laptop is not currently connected to the corporate network.
Show answer and explanation
Correct answer: B
Explanation
The correct approach for verifying compliance is to ensure the device is isolated to prevent potential risks, followed by reporting the issue to the cybersecurity team for remediation. This ensures adherence to security policies while minimizing threats to the network.
- A. Incorrect.
While installing the organization's approved antivirus software would address the problem, it is critical to first report and isolate the system to prevent any potential risk to the network.
- B. Correct.
Isolating the laptop ensures it does not pose a security risk to the rest of the network, and reporting the issue aligns with organizational policies for compliance verification.
- C. Incorrect.
Rebooting the laptop without taking further action does not guarantee that the antivirus will be installed or updated, making this an unreliable verification step.
- D. Incorrect.
Ignoring the issue violates the organization's security policy and leaves the system vulnerable, even if it is not connected to the network at the moment.