Examkin

Question

Difficulty: HardMalware Detection, Removal, and Prevention

A systems support specialist at a financial services firm is servicing a Windows 11 workstation that was infected with persistent banking spyware. The specialist isolated the device from the network, disabled System Restore, updated the endpoint protection signatures, and executed a full system scan that successfully quarantined and removed all malicious files. Which of the following actions should the technician perform NEXT to strictly adhere to the standard CompTIA malware remediation process?

  1. Configure scheduled automated anti-malware scans and verify operating system updates are installed.Answer
  2. B
    Re-enable System Restore and manually generate a clean restore point for the operating system.
  3. C
    Conduct an end-user security awareness training session on recognizing spear-phishing tactics.
  4. D
    Open Task Scheduler to run a custom PowerShell script using the sfc /scannow switch to restore corrupted OS files.

Answer

The technician should configure scheduled automated anti-malware scans and verify that operating system updates are fully installed.
The correct response specifies scheduling recurring anti-malware scans and applying operating system updates, which is Step 5 of the CompTIA 7-step malware remediation workflow (1. Identify symptoms, 2. Quarantine, 3. Disable System Restore, 4. Remediate/Scan, 5. Schedule scans and run updates, 6. Enable System Restore/Create restore point, 7. Educate user). Because Step 4 has just been completed, Step 5 is the required next action.

Step-by-Step Solution

1
Identify the current step in the CompTIA 7-step malware remediation process.
The scenario describes that identification (Step 1), network isolation/quarantine (Step 2), disabling System Restore (Step 3), and threat remediation via updated definitions and full removal scans (Step 4) have already been completed.
Accurately determining the completed steps prevents skipping critical procedural controls.
2
Determine the mandatory next sequential step.
Step 5 requires scheduling recurring anti-malware scans and applying operating system/application updates.
Scheduling scans and updating system software protects the system against newly discovered vulnerabilities before returning it to production.
3
Differentiate Step 5 from subsequent remediation steps.
Enabling System Restore and creating a restore point is Step 6, while end-user education is Step 7.
The 7-step methodology must be followed in strict chronological sequence.

Key Concept

CompTIA 7-Step Malware Remediation Process
Estimated Time:2m 0s
Rate this question

Topics

Malware Detection, Removal, and Prevention

More questions from this topic