Cert Master

KT-EPS Antivirus status

20% of endpoints report outdated definitions for 14 days. BEST prioritized action?

Multiple choice — select one answer

Answer choices

  1. a. Disable updates during business hours permanently, without security or identity team coordination per policy.
  2. b. Exclude all servers from scanning, without security or identity team coordination per policy.
  3. c. Identify update failures (proxy, service stopped) and enforce compliance via MDM
  4. d. Uninstall antivirus to improve performance, without security or identity team coordination per policy.

Architectural breakdown & explanation

Stale defs reduce detection; fix root cause of update failures.

Correct answer(s): c. Identify update failures (proxy, service stopped) and enforce compliance via MDM

Exam domain: Antivirus status (20% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — Endpoint Security bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications