What Does It Mean to Quarantine Something?

Quarantine is the process of isolating a suspicious file, message, device, account, or other resource so that it cannot continue interacting normally with users or systems. Certification exams may ask candidates to distinguish quarantine from deletion, remediation, and containment. An endpoint security tool may move a suspicious file to a protected location, while a network access control system may place an infected device on a restricted network. Quarantine preserves the item for investigation and possible recovery while reducing the immediate opportunity for harm. Security personnel…