312-50V11 practice

Q3 Single choice

A friend of yours tells you that he downloaded and executed a file that was sent to him by a coworker.
Since the file did nothing when executed, he asks you for help because he suspects that he may have installed a trojan on his computer.

what tests would you perform to determine whether his computer Is Infected?

A
Use ExifTool and check for malicious content.
B
You do not check; rather, you immediately restore a previous snapshot of the operating system.
C
Upload the file to VirusTotal.
D
Use netstat and check for outgoing connections to strange IP addresses or domains.