After a successful phishing attempt on a corporate workstation, the workstation is infected with malware that went undetected by the antivirus. When a technician arrives to investigate the issue…

Question

Options

• ACreating regular restore points
• BEducating the user
• CScanning for viruses frequently
• DChanning to a different antivirus vendor

• A
  5% (2)
• B
  84% (32)
• C
  8% (3)
• D
  3% (1)

Explanation

The root cause of the entire incident was a successful phishing attempt-meaning the user was deceived into an action that allowed malware to execute. Technical controls like antivirus failed because the malware went undetected. The only control that addresses the actual attack vector (human deception) is user education: teaching users to recognize phishing emails, suspicious links, and social engineering tactics prevents the initial compromise from occurring in the first place. Creating restore points (A) helps with recovery but does not prevent infection. Scanning for viruses more frequently (C) would not have helped since the antivirus already failed to detect this malware. Changing antivirus vendors (D) may improve detection rates but does not address the human behavior that enabled the attack.

No community discussion yet for this question.