Examkin

Question

Difficulty: MediumMalware Detection, Removal, and Prevention

An IT technician working at a logistics corporate headquarters is remediating a Windows workstation infected with rogue antivirus software. The technician has already identified the symptoms, isolated the machine from the network, and disabled System Restore. Which of the following actions should the technician perform NEXT before launching a full system anti-malware scan?

  1. Update the anti-malware engine and signature definitions using an isolated media device.Answer
  2. B
    Re-enable System Restore and create a clean baseline snapshot of the system configuration.
  3. C
    Configure Task Scheduler to run daily automated anti-malware scans and updates.
  4. D
    Conduct a end-user security awareness training session on recognizing social engineering tactics.

Answer

The technician should update the anti-malware engine and definition files prior to performing a full system scan.
According to the CompTIA 7-step malware remediation process, Step 4 is 'Remediate infected systems', which consists of two sequential parts: sub-step 4a (Update anti-malware software and definitions) followed by sub-step 4b (Scan and use removal techniques). Since the workstation is isolated from the network, definitions must be updated via external out-of-band media before initiating the scan.

Step-by-Step Solution

1
Analyze the current state within the CompTIA 7-step malware remediation process.
Steps 1 (Identify), 2 (Quarantine), and 3 (Disable System Restore) have already been completed.
Determines the appropriate next sequential remediation action required.
2
Identify the sub-components of Step 4 (Remediate the infected systems).
Sub-step 4a is updating anti-malware software/signatures, and sub-step 4b is scanning and executing removal techniques.
Antivirus software cannot effectively detect or clean current threat signatures unless updated first.
3
Select the correct action matching Step 4a.
Updating anti-malware definitions using isolated/out-of-band media (since the system is disconnected from the network).
Ensures the scanner has the latest detection patterns before scanning.

Key Concept

CompTIA 7-Step Malware Remediation Process Order
Rate this question

Topics

Malware Detection, Removal, and Prevention

More questions from this topic