Examkin

Question

Difficulty: MediumMalware Detection, Removal, and Prevention

An IT support technician at a hospitality management company is troubleshooting a Windows 11 front-desk workstation that is displaying unauthorized security warnings and redirecting web browser traffic to malicious domains. The technician confirms that active rogue security software is present on the system. According to the CompTIA standard 7-step malware remediation process, which of the following actions should the technician take NEXT?

  1. Quarantine the infected workstation by disconnecting its network cable and disabling wireless interfaces.Answer
  2. B
    Disable Windows System Restore to prevent malware files from being saved in restore points.
  3. C
    Open Task Manager and Event Viewer to identify and terminate active malicious background processes.
  4. D
    Update the anti-malware software definitions and perform a full system scan in Safe Mode.

Answer

Quarantine the infected workstation by disconnecting its network cable and disabling wireless interfaces.
After identifying malware symptoms (Step 1), the immediate next action required by the standard CompTIA 7-step malware remediation process is to quarantine the infected host (Step 2). Disconnecting Ethernet cables and disabling Wi-Fi prevents lateral infection of other network assets and stops active malware from exfiltrating data or receiving remote commands.

Step-by-Step Solution

1
Identify the completed step in the CompTIA 7-step malware remediation workflow.
The technician confirmed rogue software symptoms on the Windows 11 host (Step 1: Identify malware symptoms).
Establishing the current phase ensures proper operational sequence during incident remediation.
2
Determine the mandatory next action in the remediation sequence.
Execute Step 2: Quarantine the infected system.
Isolating network interfaces prevents the infection from spreading across the local subnet or communicating with external command-and-control servers.

Key Concept

CompTIA 7-Step Malware Remediation Process - System Isolation / Quarantine
Estimated Time:1m 15s
Rate this question

Topics

Malware Detection, Removal, and Prevention

More questions from this topic