In which scenario would it be beneficial for an organization to eradicate a threat from the environment by deleting it?
A) The Incident Response team is identifying the scope of the infection and is gathering a list of infected systems.
B) The Incident Response team is reviewing detections in the risk logs and assigning a High-Security Antivirus and Antispyware policy in the Symantec Endpoint Protection Manager (SEPM).
C) The Incident Response team completed their analysis of the threat and added it to a blacklist.
D) The Incident Response team is analyzing the file to determine if it is a threat or a false positive.

Question

Quizplus · Accepted Answer

Eradicating a threat by deleting it is beneficial after the Incident Response team has completed their analysis and confirmed it as a threat, as in option C.

In Which Scenario Would It Be Beneficial for an Organization