300-215 Question #136: Real Exam Question with Answer & Explanation

Question

A cybersecurity analyst must evaluate files from an endpoint in an enterprise network. The antivirus software on the endpoint flagged a suspicious file during a routine scan. On initial evaluation, the file did not match any known signatures in the antivirus database, but exhibited unusual network behavior during dynamic analysis. Which step should the analyst take next?

Options

• AInstall different antivirus software on the endpoint and perform another deep scan of affected
• BDelete the file immediately from the endpoint to prevent the potential spread of malware.
• CFlag the file as a potential false positive due to not matching any known malware signatures.
• DSubmit the file to a threat intelligence platform for further analysis and to identify potential IOCs.