Examkin

Question

Difficulty: EasyMalware Symptoms and Standard Removal Procedures

An IT support technician is remediating a malware-infected Windows workstation following the official CompTIA 7-step malware removal process. Place the following steps of the remediation procedure in the correct sequential order from first to last.

  1. 1Isolate the infected workstation from the network.
  2. 2Disable System Restore in Windows.
  3. 3Update anti-malware signatures and perform full system remediation scans.
  4. 4Re-enable System Restore and create a clean restore point.

Answer

The correct sequence is: 1) Isolate the infected workstation from the network, 2) Disable System Restore in Windows, 3) Update anti-malware signatures and perform full system remediation scans, and 4) Re-enable System Restore and create a clean restore point.
The standard CompTIA 7-step malware removal process strictly follows this sequence: 1. Identify malware symptoms, 2. Isolate the infected system, 3. Disable System Restore, 4. Remediate infected systems, 5. Schedule scans and run updates, 6. Enable System Restore and create a restore point, and 7. Educate the end user. Disconnecting network access comes first among these choices to contain the threat, followed by disabling restore points, executing anti-malware scans/remediation, and finally re-enabling System Restore once cleanliness is assured.

Step-by-Step Solution

1
Isolate the system
The infected endpoint is disconnected from wireless and wired network connections.
Prevents the malware from spreading to other systems on the network or communicating with remote command-and-control servers.
2
Disable System Restore
System Restore is turned off and existing restore points containing infected files are cleared.
Ensures that malware cannot be restored inadvertently from an infected restore point later.
3
Remediate infected systems
Anti-malware software is updated with current definition files and full system scans are run.
Identifies and removes active malware threats and associated infected files.
4
Re-enable System Restore
System Restore is re-enabled and a new, verified clean system restore point is created.
Establishes a reliable recovery point now that the machine is entirely clean.

Key Concept

CompTIA 7-Step Malware Remediation Procedure
Rate this question

Topics

Malware Symptoms and Standard Removal Procedures

More questions from this topic