Examkin

Question

Difficulty: EasyMalware Symptoms and Standard Removal Procedures

A desktop technician observes multiple unexpected pop-up windows and heavy CPU utilization on a user's computer. After identifying the presence of malware, which of the following actions should the technician take prior to initiating the anti-malware scanning process? (Select TWO).

  1. Disconnect the computer from the local networkAnswer
  2. Disable System Restore in WindowsAnswer
  3. C
    Create a new restore point to save current system settings
  4. D
    Schedule recurring automatic scans for the workstation

Answer

The technician should disconnect the computer from the local network to isolate it and disable System Restore in Windows before running anti-malware scans.
According to the CompTIA 7-step malware removal procedure, after identifying malware (Step 1), the technician must isolate the infected system (Step 2) and disable System Restore (Step 3) before updating anti-malware tools and scanning (Step 4). Disconnecting the network cable isolates the host, while disabling System Restore prevents infected files from being saved into system snapshots.

Step-by-Step Solution

1
Identify malware symptoms on the system.
Malware presence is identified based on pop-ups and high CPU usage.
Establishes that the system requires remediation under the 7-step removal process.
2
Isolate the infected system by disconnecting network cables and turning off Wi-Fi.
Network communication is completely severed.
Prevents lateral movement of malware to other network resources and stops command-and-control communication.
3
Disable System Restore in Windows.
System restore point creation is suspended and previous infected restore points are removed.
Prevents malicious code from being preserved in Windows restore points during scanning and remediation.

Key Concept

CompTIA 7-Step Malware Removal Procedure (System Isolation and Restore Management)
Rate this question

Topics

Malware Symptoms and Standard Removal Procedures

More questions from this topic