Examkin

Question

Difficulty: EasyMalware Detection, Removal, and Prevention

A desktop technician has finished scanning and removing a spyware infection from a Windows workstation, updated the operating system and anti-malware signature files, and configured scheduled recurring scans. According to the CompTIA 7-step malware remediation process, which of the following actions should the technician perform NEXT?

  1. Re-enable System Restore and create a new restore point.Answer
  2. B
    Provide security awareness and safe browsing training to the end user.
  3. C
    Run the sfc /scannow command from an elevated prompt to check system files.
  4. D
    Disconnect the workstation from the local network to quarantine the system.

Answer

Re-enable System Restore and create a new restore point.
The standard CompTIA 7-step malware remediation process follows this exact order: 1. Identify malware symptoms, 2. Quarantine infected systems, 3. Disable System Restore, 4. Remediate infected systems (update anti-malware and scan/remove), 5. Schedule scans and run updates, 6. Enable System Restore and create a restore point, 7. Educate end user. Because the scenario states that infection removal, signature updating, and scan scheduling have already occurred, the immediate next action is to re-enable System Restore and create a new restore point.

Step-by-Step Solution

1
Identify the completed steps from the scenario against the CompTIA 7-step malware remediation process.
Steps 1 through 5 (Identify, Quarantine, Disable System Restore, Remediate/Scan, and Schedule Scans/Updates) are completed.
Determining which steps are already done establishes where the technician currently is in the remediation workflow.
2
Determine Step 6 of the CompTIA 7-step remediation framework.
Step 6 requires re-enabling System Restore and creating a new restore point.
Once the system is verified clean and ongoing prevention scans are scheduled, establishing a known-good recovery point restores baseline protection.

Key Concept

CompTIA 7-Step Malware Remediation Process - Step 6 (Enable System Restore and Create a Restore Point)
Rate this question

Topics

Malware Detection, Removal, and Prevention

More questions from this topic