SK0-003 · Question #602
A server was recently updated with the latest antivirus definitions. Immediately after the update, the server begins to report `file not found' errors for a mission critical application. Which of…
The correct answer is D. The update has quarantined files that are false positives. After an antivirus definition update, a mission critical application reporting "file not found" errors is most likely due to the antivirus incorrectly identifying legitimate application files as threats and quarantining them.
Question
A server was recently updated with the latest antivirus definitions. Immediately after the update, the server begins to report `file not found' errors for a mission critical application. Which of the following is the MOST likely reason for this?
Options
- AThe update was done incorrectly and now the server needs to be restarted.
- BThe update has discovered viruses on the server and removed those virus files.
- CThe update requires a reboot for the files to process correctly.
- DThe update has quarantined files that are false positives.
How the community answered
(46 responses)- A7% (3)
- B4% (2)
- C11% (5)
- D78% (36)
Why each option
After an antivirus definition update, a mission critical application reporting "file not found" errors is most likely due to the antivirus incorrectly identifying legitimate application files as threats and quarantining them.
While an incorrect update or a needed restart can cause issues, the specific "file not found" error immediately after an antivirus update strongly suggests file interference, not just an incomplete update process.
If actual viruses were found and removed, the application might still report errors, but "file not found" points more specifically to missing components, not necessarily malicious ones, making false positives more likely in this context.
While some updates require reboots, the "file not found" error directly indicates missing files rather than a pending update process.
Antivirus software, after an update, may incorrectly flag legitimate application files as malware (false positives) and move them to a quarantine area. This action makes the files unavailable to the application, resulting in "file not found" errors.
Concept tested: Antivirus false positives impact on applications
Source: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/restore-quarantined-files-microsoft-defender-antivirus?view=o365-worldwide
Topics
Community Discussion
No community discussion yet for this question.