フリー問題

問題文

A never-before-seen executable is downloaded through the firewall. What sequence describes how a verdict for that file is obtained and then reused?

選択肢

1. The file is submitted for analysis, a verdict is produced from its observed behavior, and that verdict is then distributed so the same file is recognized without repeating the analysis.
2. The file is compared against a list of approved publishers, and anything not on that list is discarded without further analysis, so the published list is the only thing the verdict depends on.
3. The file is held indefinitely until an administrator inspects it manually, in a queue that no automatic verdict may bypass at all, and records a decision.
4. The file is allowed and a log entry is written, because verdicts are only produced for files that were already known to be malicious and an unknown file therefore has nothing that it can be compared against yet.