Which two (2) factors should the administrator consider?

In the virus and Spyware Protection policy, an administrator sets the First action to Clean risk and sets If first action fails to Delete risk.

Which two (2) factors should the administrator consider? (Select two.)
A . The deleted file may still be in the Recycle Bin.
B . IT Analytics may keep a copy of the file for investigation.
C . False positives may delete legitimate files.
D . Insight may back up the file before sending it to Symantec.
E . A copy of the threat may still be in the quarantine.

View Answer

Answer: CE

Explanation:

When configuring a Virus and Spyware Protection policy with the actions to "Clean risk" first and "Delete risk" if cleaning fails, two important considerations are:

False Positives (C): There is a risk that legitimate files may be falsely identified as threats and deleted if the cleaning action fails. This outcome underscores the importance of careful policy configuration to avoid loss of important files.

Quarantine Copy (E): Even if a file is deleted, a copy might still remain in the quarantine. This backup allows for retrieval if the deletion was a false positive or if further analysis of the file is required for investigation purposes.

These considerations help administrators avoid unintended data loss and maintain flexibility for future review of quarantined threats.