MENU
A friend of yours tells you that he downloaded and executed a file that was sent to him by a coworker. Since the file did nothing when executed, he asks you for help because he suspects that he may have installed a trojan on his computer.
what tests would you perform to determine whether his computer Is Infected?
Suggested Answer: D
Get Premium 312-50 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
KA
Kathrine
10 months ago
Wait, he just ran a random file? That's risky!
MO
Mohammad
10 months ago
ExifTool might not catch everything, though.
RO
Rosina
11 months ago
Not sure if restoring a snapshot is the best move.
DY
Dylan
11 months ago
Using netstat is a solid idea to check for weird connections.
TO
Tonette
11 months ago
Definitely upload the file to VirusTotal!
CH
Chara
11 months ago
ExifTool sounds familiar, but I can't recall if it's really effective for detecting trojans. I might lean towards using VirusTotal instead.
LU
Lucia
12 months ago
I feel like restoring a snapshot might be too drastic without checking for infections first. We should investigate before taking such measures.
JU
Juliana
12 months ago
I'm not entirely sure, but I think checking for outgoing connections with netstat could help identify if something suspicious is happening.
CR
Cristal
1 year ago
I remember we discussed using VirusTotal in class; it seems like a good first step to check if the file is flagged as malicious.
SH
Sherell
1 year ago
ExifTool? I'm not familiar with that tool. I think I'd feel more comfortable sticking to the basics like netstat and checking for any weird network activity.
AL
Aleta
1 year ago
Okay, let's think this through. I'd probably upload the file to VirusTotal and see if it comes back as malicious. That's a good first step to determine if it's a trojan.
HO
Hobert
1 year ago
I'm a bit unsure about this one. Should I really just restore a previous snapshot without checking anything first? That seems a bit extreme.
GA
Gayla
1 year ago
Hmm, this is a tricky one. I think I'd start by using netstat to check for any suspicious outgoing connections. That could give us a clue if the computer is infected.
VE
Veda
1 year ago
You know, if I found a suspicious file on my computer, the first thing I'd do is call in an airstrike. Just to be safe.
KA
Karma
1 year ago
That's a bit extreme, calling in an airstrike. But it's good to be cautious with suspicious files.
BA
Barrie
1 year ago
D) Use netstat and check for outgoing connections to strange IP addresses or domains.
MA
Madalyn
1 year ago
C) Upload the file to VirusTotal.
TI
Tiffiny
1 year ago
A) Use ExifTool and check for malicious content.
AR
Arthur
1 year ago
ExifTool? Really? That's more for image metadata, not malware detection. I think D is the way to go here.
JO
Joanna
1 year ago
Option B is tempting, but it's a bit of an overreaction. I'd start with VirusTotal first to see if the file is known malware.
RO
Rolf
1 year ago
C: After that, using ExifTool to check for malicious content could be helpful in determining if the file is infected.
ED
Edward
1 year ago
B: I would also use netstat to check for any suspicious outgoing connections.
RA
Rasheeda
1 year ago
A: I agree, using VirusTotal is a good first step to check for known malware.
KE
Keva
1 year ago
I would personally go with restoring a previous snapshot of the operating system to be safe.
NU
Nu
1 year ago
I think using netstat to check for outgoing connections is a good idea to see if there are any suspicious activities.
QU
Queenie
1 year ago
I would upload the file to VirusTotal to check for any potential threats.
KI
Kina
1 year ago
I'd definitely go with option D. Checking for suspicious network connections is the best way to detect a potential trojan infection.
CA
Caren
1 year ago
User 3: Using ExifTool to check for malicious content is also a good idea before taking any further steps.
XU
Xuan
1 year ago
User 2: I think uploading the file to VirusTotal could also help identify any malicious content.
ST
Stephanie
1 year ago
User 1: I agree, option D is a good choice to check for outgoing connections.