ITPEC IP April 2018 Question 30

An attached file should be checked for malware even when it appears to be an ordinary image. An extension such as .jpg can be falsified, files can exploit vulnerabilities in image-processing software, and malicious content may arrive from trusted or compromised senders.

Answer (c)

Why not others:
- encryption protects message confidentiality but does not prove that the content is harmless
- a sender's inspection cannot replace controls at the receiving environment
- known senders can be compromised, so scanning only unknown senders is unsafe

Key rule: Scan incoming content regardless of extension, encryption status, or apparent sender trust, and keep detection tools current.

AI-generated — may contain errors