A technician is tasked with removing a malware infection from a workstation. According to the standard CompTIA 7-step malware remediation process, in what sequence should the technician perform the following steps?
- 1Quarantine the infected system
- 2Disable System Restore in Windows
- 3Remediate the infected system by updating anti-malware software and scanning
- 4Enable System Restore and create a new restore point
- 5Educate the end user
Answer
The correct sequence following the CompTIA 7-step malware removal process is: Quarantine the infected system -> Disable System Restore in Windows -> Remediate the infected system by updating anti-malware software and scanning -> Enable System Restore and create a new restore point -> Educate the end user.
The standard CompTIA 7-step malware removal process follows a specific order: 1. Identify malware symptoms, 2. Quarantine infected system, 3. Disable System Restore, 4. Remediate infected systems (update anti-malware / scan and remove), 5. Schedule updates and run scans, 6. Enable System Restore and create a restore point, 7. Educate the end user. Arranging the actions starting with quarantine and ending with user education strictly aligns with this methodology.
Step-by-Step Solution
Key Concept
CompTIA 7-step Best Practice Methodology for Malware Remediation