100-160 Question 166
Select 3You are a cybersecurity technician tasked with investigating a potential malware infection in your organization's network. After conducting a full system scan, you review the scan logs and find multiple flagged files in a user’s directory. Upon further inspection, some flagged files are confirmed as malware while others are identified as false positives. What should be your next steps to remediate the situation effectively?
- A
Quarantine the confirmed malware files to prevent further spread.
- B
Delete all flagged files immediately to ensure system safety.
- C
Report the false positives to the cybersecurity team or vendor for further analysis.
- D
Restore the false positives to their original state to maintain system functionality.
- E
Ignore the flagged files since some of them are only false positives.
Show answer and explanation
Correct answers: A, C, D
Explanation
Effective malware remediation involves isolating confirmed threats, addressing false positives responsibly, and ensuring accurate reporting for future threat management. Quarantining the malware prevents its spread, restoring false positives ensures system functionality, and reporting them helps improve detection accuracy. Deleting all flagged files or ignoring them could result in data loss or further compromise.
- A. Correct.
Quarantining confirmed malware files is critical to preventing their spread and further damage to the system or network.
- B. Incorrect.
Deleting all flagged files without verification is not recommended as it may result in removing legitimate files that are false positives.
- C. Correct.
Reporting false positives to the cybersecurity team or vendor helps improve the threat detection system and ensures accurate future scans.
- D. Correct.
Restoring false positives to their original state is necessary to maintain system functionality and avoid disrupting legitimate operations.
- E. Incorrect.
Ignoring flagged files is negligent and could lead to undetected malware spreading further or causing harm.