Raoul has received a file attachment from a known individual. He has no reason to expect files from this individual. Which of the following is an effective security strategy for Raoul to take?

Question

Options

• AOpen the file attachment and use anti-virus software to scan it.
• BBefore opening the attachment, use anti-virus software to scan the system's hard disk.
• CMake back-up copies of important files so that it is possible to recover them in case of
• DBefore opening the attachment, call or send a text or instant message to the individual to

• A
  3% (1)
• B
  3% (1)
• D
  94% (31)

Explanation

Option D is correct because verifying with the sender through a separate communication channel (call, text, or IM) confirms whether they intentionally sent the file - this catches phishing and social engineering attacks where an attacker spoofs a known contact.

Why the distractors fail:

• A is dangerous because opening the file first executes potentially malicious code before the scan can stop it; scanning should happen before opening, not after.
• B scans the wrong thing - scanning the hard disk before opening the attachment doesn't inspect the attachment itself, so it provides no relevant protection.
• C (backups) is good general hygiene but is a recovery strategy, not a prevention strategy; it doesn't stop the malware from running.

Memory tip: Think "verify before you trust" - unexpected files from known people are a classic phishing red flag. The safest action is always to confirm through a different channel (not by replying to the same email), since the attacker may control that channel too.

No community discussion yet for this question.