Examkin

Question

Difficulty: MediumMalware Symptoms and Standard Removal Procedures

An IT support technician at a commercial bakery distribution facility has completed remediating a malware infection on an inventory control workstation. The technician previously isolated the system, disabled System Restore, removed the infected files, updated anti-malware definitions, and configured scheduled recurring scans. According to CompTIA standard malware removal procedures, which of the following actions should the technician take NEXT?

  1. Enable System Restore and create a new system restore point.Answer
  2. B
    Educate the end user on malware prevention and safe browsing habits.
  3. C
    Run the System File Checker utility (`sfc /scannow`) to rebuild corrupted restore points.
  4. D
    Re-enable all disabled background startup services and startup applications.

Answer

Enable System Restore and create a new system restore point.
According to the official CompTIA 7-step malware removal methodology (1. Identify symptoms, 2. Isolate system, 3. Disable System Restore, 4. Remediate infected systems, 5. Schedule scans and updates, 6. Enable System Restore and create a restore point, 7. Educate end user), once the technician has remediated the malware and configured recurring scans (Steps 4 and 5), the immediate NEXT step is to re-enable System Restore and generate a fresh, clean restore point (Step 6).

Step-by-Step Solution

1
Review the CompTIA 7-step malware removal process steps completed so far.
Completed steps: Step 1 (Identify), Step 2 (Isolate), Step 3 (Disable System Restore), Step 4 (Remediate: update anti-malware and scan/remove), and Step 5 (Schedule scans and updates).
The technician has completed all steps through Step 5 of the standard remediation workflow.
2
Identify the next sequential step in the process.
Step 6 requires re-enabling System Restore and creating a new restore point.
Creating a clean restore point ensures the operating system has a valid recovery point free from malware infections.
3
Differentiate Step 6 from Step 7.
End-user education (Step 7) must strictly follow system recovery normalization (Step 6).
System configuration and protection baselines must be fully restored before final sign-off and user training.

Key Concept

CompTIA 7-Step Malware Removal Procedure (Step 6: Enable System Restore)
Estimated Time:1m 0s
Rate this question

Topics

Malware Symptoms and Standard Removal Procedures

More questions from this topic