Examkin

Question

Difficulty: MediumMalware Detection, Removal, and Prevention

An IT support technician at a hotel reception network center is troubleshooting a Windows workstation affected by keylogger malware. The technician has confirmed the infection, isolated the machine from the network, and disabled System Restore. Which of the following actions should the technician perform NEXT according to the CompTIA standard 7-step malware remediation process?

  1. Update the anti-malware signature definitions and perform a full system remediation scan.Answer
  2. B
    Enable System Restore and generate a clean restore point to safeguard system settings.
  3. C
    Configure Task Scheduler to automate daily signature updates and routine system scans.
  4. D
    Conduct an end-user security awareness session regarding safe browsing and email attachments.

Answer

Update the anti-malware signature definitions and perform a full system remediation scan.
The standard CompTIA 7-step malware remediation process follows a strict order: 1. Identify symptoms, 2. Quarantine infected system, 3. Disable System Restore, 4. Remediate infected systems (update anti-malware signatures and scan/remove), 5. Schedule updates and scans, 6. Enable System Restore and create a restore point, 7. Educate end-user. Because steps 1 through 3 are complete, the technician must execute Step 4 next by updating the anti-malware engine definitions and running a thorough remediation scan.

Step-by-Step Solution

1
Identify completed steps in the CompTIA 7-step malware remediation framework.
Step 1 (Identify symptoms), Step 2 (Quarantine system), and Step 3 (Disable System Restore) have already been completed.
Determining the current phase ensures proper progression without omitting required isolation or repair actions.
2
Determine the mandatory next phase in sequence.
Step 4 is 'Remediate infected systems'.
Remediation consists of updating anti-malware signatures/tools and conducting comprehensive scans to detect and remove active malware.
3
Select the option that corresponds to updating definition files and scanning.
Updating anti-malware signatures and running a full system scan is the direct next action.
Scanning with outdated signatures may fail to remove newly mutated malware strains.

Key Concept

CompTIA 7-Step Malware Remediation Process Sequence
Estimated Time:1m 15s
Rate this question

Topics

Malware Detection, Removal, and Prevention

More questions from this topic