Join 60,000+ competitive exam aspirants
or with email
Your Cart
SubtotalтВ╣0
TotalтВ╣0
Examoogle тАв User тАв info@examoogle.com тАв EE-2024-8821
Chapter 1 of 12 тАв Page 1 of 248ЁЯФТ Protected PDF тАв Watermarked
Join 60,000+ competitive exam aspirants
What is the primary function of an antivirus program when it encounters a suspicious file?
To increase the processor speed
To quarantine or delete the infected file to prevent spread
To format the hard drive automatically
To encrypt all user passwords
To quarantine or delete the infected file to prevent spread
An antivirus program is designed to secure a system by identifying, isolating, and neutralizing malicious software. When a suspicious file is detected, the program acts to neutralize the threat by isolating it in a secure location (quarantine) or removing it entirely to prevent unauthorized system access or data corruption.
ISO/IEC 27001:2013 Information Security Management
An antivirus program is designed to secure a system by identifying, isolating, and neutralizing malicious software. When a suspicious file is detected, the program acts to neutralize the threat by isolating it in a secure location (quarantine) or removing it entirely to prevent unauthorized system access or data corruption.
PriskтАЛ=Threat├ЧVulnerability├ЧAsset┬аValue
Detection┬аRate=Total┬аThreatsIdentified┬аThreatsтАЛ├Ч100%
Antivirus software utilizes signature-based detection or heuristic analysis to match file patterns against a database of known malware. Upon detecting a match or suspicious behavior, the software interrupts the file execution, moves the file to a restricted 'quarantine' directory with modified permissions to prevent execution, or triggers a deletion process to eliminate the malicious code from the storage medium.
Signature-based detection relies on unique byte sequences found in malware files.
Heuristic analysis monitors program behavior for suspicious activities like unauthorized registry modifications.
Quarantining is a reversible security measure that prevents execution without permanent file loss.
The primary goal is the preservation of the CIA Triad: Confidentiality, Integrity, and Availability.
Prevents system-wide malware propagation.
Provides automated protection against zero-day threats via behavior analysis.
High false-positive rates can occur with heuristic engines.
Real-time scanning can result in significant system resource consumption.
Endpoint security for enterprise networks.
Personal computer protection against ransomware and spyware.
Antivirus programs do not improve processor speed; they consume CPU cycles during scanning.
Formatting the hard drive is a destructive action that results in data loss, not a security protocol for file containment.
Encrypting user passwords is a feature of password managers, not a function of antivirus software upon threat detection.
B is correct тАФ The antivirus software quarantines or deletes the file to contain the threat and prevent further damage or infection spread.
Remember that modern security focus is shifting from reactive signature-based detection to proactive EDR (Endpoint Detection and Response) solutions that leverage behavioral analytics.