MENU
An analyst finds .xyz files of unknown origin that are large and undetected by antivirus. What action should be taken next?
Suggested Answer: A
Get Premium 300-215 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The safest and most effective approach is to isolate the files and subject them to heuristic and behavioral analysis. This can reveal obfuscated malware or unauthorized data storage techniques, even if signature-based antivirus fails to flag them.
31 comments · newest first
GR
Gracia
6 months ago
A) Agreed! Better safe than sorry. Let’s dig deeper.
AR
Arthur
6 months ago
D) Moving to a less secure area? That sounds dangerous!
CA
Carey
7 months ago
C) Deleting could be too hasty. We need to analyze first.
ZO
Zona
7 months ago
B) Renaming seems risky. What if they’re harmful?
BL
Blondell
7 months ago
Wait, how can they be undetected? Sounds sketchy!
MA
Marylou
7 months ago
A makes the most sense, better safe than sorry!
CH
Chau
7 months ago
C is too extreme, we should investigate first.
KA
Katie
8 months ago
Renaming to .txt? That sounds risky.
LE
Lettie
8 months ago
Definitely A, we need to analyze those files properly.
GE
Genevieve
8 months ago
D) Move to a less secure network? Are you kidding me? That's a recipe for disaster!
MA
Marjory
8 months ago
B) Rename to .txt? Nah, that's just asking for trouble. A) is the way to go.
DI
Dianne
9 months ago
A) Isolate and analyze. Can't be too careful with unknown files these days.
RO
Robt
9 months ago
A) Definitely the way to go. Better safe than sorry with those sketchy .xyz files.
FR
Frederica
9 months ago
A) Isolate the files and perform a deeper heuristic analysis to detect potential unknown malware or data exfiltration payloads. This is the safest approach.
SI
Silva
9 months ago
Moving files to a less secure segment seems risky. I recall that we should always prioritize containment first, so option A feels like the safest bet, but I’m not 100% confident.
GE
Gertude
9 months ago
Renaming the files to .txt sounds tempting, but I feel like that could lead to overlooking something critical. I think option C might be too extreme without further investigation.
MA
Madonna
9 months ago
I think we practiced a similar question where isolating files was emphasized. I would definitely lean towards option A, but I wonder if there are any risks involved in that process.
SU
Sunshine
10 months ago
I'm a little unsure about this one, to be honest. A sounds like the safest bet, but I'm also kind of curious about what's in those files. Maybe I'll take a quick peek before isolating them, just to see what's up.
GE
Gerald
10 months ago
Definitely A. No way I'm renaming those files or moving them to a less secure network. Isolate and analyze, that's the way to go. Gotta protect the system, you know?
TA
Talia
10 months ago
Okay, let's think this through. I'm leaning towards A as well - isolating the files and really digging into them seems like the most responsible way to handle this. Gotta be careful with that unknown malware!
KA
Karima
10 months ago
I remember we discussed the importance of isolating suspicious files for further analysis. Option A seems like the right choice, but I'm not entirely sure about the specifics of heuristic analysis.
MI
Micah
10 months ago
A) Definitely isolate them first. Safety first!
OC
Ocie
11 months ago
C) Delete them! Who needs the risk? Just get rid of those files and move on.
TA
Tayna
11 months ago
A) Heuristic analysis is key. We need to know what we’re dealing with.
ME
Mee
11 months ago
Ugh, I hate these types of questions. I'm tempted to just go with C and delete the files, but I guess that's not the best approach. Maybe I'll try to talk it through with the instructor after the exam.
SK
Skye
11 months ago
Hmm, this seems like a tricky one. I'd probably go with option A - isolating the files and doing a deeper analysis to see what's going on. Better safe than sorry, you know?
LI
Linette
5 months ago
Deleting them outright could be a mistake. Let's investigate!
ST
Stefanie
6 months ago
Renaming them to .txt? That's risky. Better to analyze first.
SO
Sophia
6 months ago
Option A seems smart. We need to understand what we're dealing with.
MO
Moon
6 months ago
Definitely! A deeper analysis could reveal hidden threats.
DA
Daniel
6 months ago
I agree, isolating the files is the best move. Can't take any chances.