GISF: GIAC Information Security FundamentalsDemo

By GIAC · Question Mode

QuestionQ233

Network Security and Architecture

You are the Network Administrator for a software development company. The company develops various utilities and tools. You have noticed that some files created by the company are being deleted from systems. When one is deleted, it appears to be deleted from every computer on the network. Where would you first look to diagnose this issue?

  • A Antivirus log
  • B System log
  • C IDS log
  • D Firewall log
Explanation

Antivirus and endpoint-protection products can automatically quarantine or remove files detected as threats, including false positives, and record those remediation actions in their logs or protection history. A coordinated disappearance across systems therefore warrants checking the antivirus log first.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!