Page 1 of 1

Refer to the exhibit. An engineer is analyzing a .LNK (shortcut) file recently received as an email attachment and block

Posted: Fri Jul 22, 2022 5:23 pm
by answerhappygod
Refer to the exhibit. An engineer is analyzing a .LNK (shortcut) file recently received as an email attachment and blocked by email security as suspicious. What is the next step an engineer should take?
Refer To The Ex 1
Refer To The Ex 1 (132.88 KiB) Viewed 88 times
A. Delete the suspicious email with the attachment as the file is a shortcut extension and does not represent any threat.
B. Upload the file to a virus checking engine to compare with well-known viruses as the file is a virus disguised as a legitimate extension.
C. Quarantine the file within the endpoint antivirus solution as the file is a ransomware which will encrypt the documents of a victim.
D. Open the file in a sandbox environment for further behavioral analysis as the file contains a malicious script that runs on execution.