For systems not commonly affected by malicious software, what is required regarding anti-virus applicability?

For systems not commonly affected by malicious software, what is required regarding anti-virus applicability?

• A. Periodic evaluations to identify threats to confirm antivirus not required.
• B. Always require antivirus on all systems.
• C. Periodic evaluations to identify evolving threats to confirm whether such systems continue to not require anti-virus software.
• D. Never evaluate.

Answer: (C)

The key idea is that antivirus decisions aren’t fixed—even systems not typically targeted by malware must be regularly reviewed as threats evolve. The best answer says to perform periodic evaluations to identify evolving threats and use that information to confirm whether those systems should continue to not require anti-virus software. As new malware techniques and attack vectors appear, the risk picture can change, and what was once deemed unnecessary may no longer be safe. If evolving threats don’t impact those particular systems, you can keep them without antivirus; if they do, antivirus may become warranted. The other options fail because they either assume antivirus is always or never required or advocate skipping re-evaluation, which ignores the dynamic nature of threats.

The key idea is that antivirus decisions aren’t fixed—even systems not typically targeted by malware must be regularly reviewed as threats evolve. The best answer says to perform periodic evaluations to identify evolving threats and use that information to confirm whether those systems should continue to not require anti-virus software. As new malware techniques and attack vectors appear, the risk picture can change, and what was once deemed unnecessary may no longer be safe. If evolving threats don’t impact those particular systems, you can keep them without antivirus; if they do, antivirus may become warranted. The other options fail because they either assume antivirus is always or never required or advocate skipping re-evaluation, which ignores the dynamic nature of threats.