Examkin

Question

Difficulty: MediumMalware Symptoms and Standard Removal Procedures

A field technician is troubleshooting a Windows 11 workstation used for broadcast audio editing at a commercial radio station. The computer exhibits symptoms of a malware infection, including modified host files and unauthorized browser redirects. The technician has already confirmed the malware symptoms and isolated the computer from the local network. Which TWO of the following procedures should the technician perform NEXT prior to executing the malware remediation scan?

  1. Disable System Restore in Windows settingsAnswer
  2. Update anti-malware definitions and scan engine filesAnswer
  3. C
    Enable System Restore and generate a new system restore point
  4. D
    Schedule recurring automated anti-malware scans in Task Scheduler

Answer

The technician should disable System Restore and update the anti-malware definitions prior to scanning.
Following the CompTIA 7-step malware removal methodology, after identifying symptoms (Step 1) and isolating the system (Step 2), the technician must disable System Restore (Step 3) and update anti-malware definitions (Step 4a) before running scans to remediate the system (Step 4b).

Step-by-Step Solution

1
Identify the current phase in the CompTIA 7-step malware removal procedure.
The technician has completed Step 1 (Identify malware symptoms) and Step 2 (Isolate the infected system).
Determining the current phase ensures the technician follows the standard operational procedure without skipping essential steps.
2
Execute Step 3 by disabling System Restore.
System Restore is turned off so uninfected restore points are preserved and infected files are not backed up.
If left enabled, System Restore could inadvertently preserve infected files during remediation or allow malware to re-infect the system.
3
Execute Step 4a by updating anti-malware definitions.
The local anti-malware engine receives the latest signature files.
Updated definitions ensure the security software can accurately detect and quarantine current malware variants.

Key Concept

CompTIA 7-Step Malware Removal Procedure
Rate this question

Topics

Malware Symptoms and Standard Removal Procedures

More questions from this topic