Clerks receive citizen email with untrusted attachments. What technique best contains potential malware before files open on the clerk PC?
Select an answer to reveal the explanation.
Short Explanation
Treat weird citizen attachments like suspicious packages—open them in a sandbox first, not on the clerk's real desktop. Full access, no antivirus, or personal webmail just spreads the blast radius.
Full Explanation
Sandboxing executes or inspects untrusted content in an isolated environment so malicious code cannot freely access the production workstation and network. Opening attachments natively with full privileges, disabling protective controls, or moving files to personal webmail increases risk. For municipal clerk workflows, sandboxing attachments is a standard Domain 4.1 containment technique.