Examkin

Question

Difficulty: EasyMalware Symptoms and Standard Removal Procedures

A systems administrator has successfully remediated a malware infection on a workstation, updated the anti-malware software signatures, and scheduled recurring system scans. According to standard CompTIA malware removal procedures, which of the following steps should the administrator take NEXT?

  1. Enable System Restore and create a new restore pointAnswer
  2. B
    Educate the end user on safe browsing habits and security awareness
  3. C
    Isolate the computer by disconnecting its network interface card
  4. D
    Re-disable System Restore to prevent future infected restore points

Answer

Enable System Restore and create a new restore point.
Under the standard 7-step malware removal process (1. Identify, 2. Isolate, 3. Disable System Restore, 4. Remediate, 5. Schedule scans/updates, 6. Enable System Restore and create restore point, 7. Educate end user), re-enabling System Restore and creating a fresh restore point immediately follows scheduling scans and updates.

Step-by-Step Solution

1
Determine current stage within CompTIA 7-step malware remediation process
Remediation (Step 4) and scheduling scans/updates (Step 5) are complete.
Identifies the next sequential step required by standard operational procedures.
2
Identify the action for Step 6
Step 6 requires re-enabling System Restore and creating a new, clean restore point.
Restores OS backup protection after ensuring all malicious files and compromised restore points are removed.

Key Concept

CompTIA 7-Step Malware Removal Procedure - Step 6 (Enable System Restore and create a restore point)
Rate this question

Topics

Malware Symptoms and Standard Removal Procedures

More questions from this topic