Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Palo Alto Networks Cybersecurity-Practitioner Exam - Topic 2 Question 13 Discussion

Posted by Charlene on Jun 20, 2026 at 04:32 PM

When signature-based antivirus software detects malware, what three things does it do to provide protection? (Choose three.)

Suggested Answer: B, C, D

Signature-based antivirus software is a type of security software that uses signatures to identify malware. Signatures are bits of code that are unique to a specific piece of malware.When signature-based antivirus software detects a piece of malware, it compares the signature to its database of known signatures12. If a match is found, the software can do three things to provide protection:

Alert system administrators: The software can notify the system administrators or the users about the malware detection, and provide information such as the name, type, location, and severity of the malware.This can help the administrators or the users to take appropriate actions to prevent further damage or infection3.

Quarantine the infected file: The software can isolate the infected file from the rest of the system, and prevent it from accessing or modifying any other files or processes.This can help to contain the malware and limit its impact on the system4.

Delete the infected file: The software can remove the infected file from the system, and prevent it from running or spreading.This can help to eliminate the malware and restore the system to a clean state4.

:

What is a signature-based antivirus? - Info Exchange

What is a Signature and How Can I detect it? - Sophos

How Does Heuristic Analysis Antivirus Software Work?

What Is Signature-based Malware Detection? | RiskXchange


Get Premium Cybersecurity-Practitioner Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
12 comments · newest first
DA
Daren 2 months ago
I’m leaning towards C, D, and E. Removing the extension can stop it from running.
AR
Aretha 2 months ago
I agree! B is crucial for alerting the team. C helps isolate the threat.
RO
Roslyn 2 months ago
I think B, C, and D are the right choices. They ensure immediate action.
AN
Anglea 2 months ago
Yeah, quarantine and delete are standard practices!
VI
Vivan 2 months ago
Wait, does it really decrypt files? That sounds off.
KI
Kip 3 months ago
Deleting the infected file is a must!
LI
Linn 3 months ago
I think it also alerts system admins.
DO
Dominic 3 months ago
It definitely quarantines the infected file.
AN
Anglea 3 months ago
I’m pretty confident that quarantining and deleting are correct, but I’m uncertain about the alerting part.
AR
Arleen 3 months ago
I feel like deleting the infected file is also a common response, but I can't recall if it always happens.
VI
Viva 3 months ago
I remember practicing a similar question, and I think quarantining the infected file is one of the main actions.
RA
Rasheeda 4 months ago
I think it definitely alerts system administrators, but I'm not sure about the other two options.
0/2000 characters

Save Cancel