Cisco 300-215 Exam - Topic 7 Question 5 Discussion
Refer to the exhibit.An engineer is analyzing a .LNK (shortcut) file recently received as an email attachment and blocked by email security as suspicious. What is the next step an engineer should take?
D) Open the file in a sandbox environment for further behavioral analysis as the file contains a malicious script that runs on execution.
A) Delete the suspicious email with the attachment as the file is a shortcut extension and does not represent any threat.
B) Upload the file to a virus checking engine to compare with well-known viruses as the file is a virus disguised as a legitimate extension.
C) Quarantine the file within the endpoint antivirus solution as the file is a ransomware which will encrypt the
documents of a victim.
Mel
10 months agoGlendora
10 months agoCelestine
11 months agoErnestine
11 months agoIrma
11 months agoAdelina
11 months agoAnastacia
11 months agoJesusita
11 months agoPaulene
11 months ago