Cert Master

KT-EPS Antivirus status

A server excludes the entire C: drive from scanning for 'performance.' What risk acceptance is this?

Multiple choice — select one answer

Answer choices

  1. a. AV scans cause guaranteed data loss, without security or identity team coordination per policy.
  2. b. Malware can reside undetected on excluded volumes
  3. c. Exclusions apply only to network traffic, without security or identity team coordination per policy.
  4. d. Exclusions improve encryption strength, without security or identity team coordination per policy.

Architectural breakdown & explanation

Broad exclusions create blind spots attackers target.

Correct answer(s): b. Malware can reside undetected on excluded volumes

Exam domain: Antivirus status (20% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — Endpoint Security bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications