You investigate a suspected malware incident and confirm that it was a false alarm.

exams NSK100 NSK100 exam 0 Comments

You investigate a suspected malware incident and confirm that it was a false alarm.
A . In this scenario, how would you prevent the same file from triggering another incident?
B . Quarantine the file. Look up the hash at the VirusTotal website.
C . Export the packet capture to a pcap file.
D . Add the hash to the file filter.

Answer: C