ITPEC IP October 2023 Question 31

An email attachment should be checked for malware even when it appears to be an image. A filename ending in .jpg does not prove the file's true format or safety. Attackers can disguise executable content, exploit vulnerabilities in image-processing software, or use misleading double extensions.

Answer (c)

Why not others:
- (a) encryption protects content in transit or storage; it does not guarantee that the decrypted content is malware-free
- (b) the recipient cannot rely solely on a sender's scan, which may be outdated, bypassed, or falsely claimed
- (d) known or compromised senders can also distribute malware

Key rule: Scan all received attachments according to policy, regardless of extension, encryption, or apparent sender trustworthiness.

AI-generated — may contain errors