Exam PCCET topic 1 question 48 discussion

Deployment of signature-based antivirus software requires installation of an engine that typically has kernel-level access to an endpoint’s system resources. Signature-based antivirus software scans an endpoint’s hard drive and memory, based on a predefined schedule and in real time when a file is accessed. If a known malware signature is detected, the software performs a predefined action, such as: ● Quarantine: Isolates the infected file so that it cannot infect the endpoint or other files ● Delete: Removes the infected file ● Alert: Notifies the user (and/or system administrator) that malware has been detected

The response to this question is wrong. the right response : Quarantine: Isolates the infected file so that it cannot infect the endpoint or other files ● Delete: Removes the infected file ● Alert: Notifies the user (and/or system administrator) that malware has been detected

I go with CDE- Since its signature based ,There is no need /important of notification to admin .

This is a question on Palo Alto Beacon platform and it states that the correct answers are Quarantine, Delete & Alert

page 123 of the study guide: If a known malware signature is detected, the software performs a predefined action, such as: ● Quarantine: Isolates the infected file so that it cannot infect the endpoint or other files ● Delete: Removes the infected file ● Alert: Notifies the user (and/or system administrator) that malware has been detected