Examkin

Question

Difficulty: MediumMalware Detection, Removal, and Prevention

A desktop technician at a biopharmaceutical research laboratory is remediating a Windows 11 workstation infected with a trojan. The technician has already disconnected the computer from the network to quarantine the system and has disabled System Restore. Which of the following actions should the technician perform NEXT as part of the standard malware remediation process? (Select TWO.)

  1. Update the anti-malware software definitions and signature files.Answer
  2. B
    Re-enable System Restore and create a baseline restore point.
  3. Perform a full system scan using anti-malware tools to remediate infected files.Answer
  4. D
    Run chkdsk /f from an elevated command prompt to repair encrypted system files.

Answer

The technician should update the anti-malware software definitions and perform a full system scan to remediate the infected files.
According to the CompTIA 7-step malware remediation process, once the system is quarantined and System Restore is disabled, Step 4 requires remediating the system. Remediation consists of updating anti-malware definitions followed by conducting a full anti-malware scan to remove the threat.

Step-by-Step Solution

1
Review the current state within the CompTIA 7-step malware remediation process.
Step 1 (Identify malware symptoms), Step 2 (Quarantine system), and Step 3 (Disable System Restore) have already been completed.
Understanding the current stage establishes what specific actions logically follow.
2
Identify the immediate next stage, which is Step 4 (Remediate the infected system).
Step 4 consists of two sub-steps: 4a (Update anti-malware signatures) and 4b (Scan and use removal techniques).
Remediation requires current threat signatures before scanning and cleaning infected files.
3
Select the option pairs that correspond to Step 4 sub-steps.
Updating anti-malware definition files and executing a full anti-malware system scan represent the required actions.
These actions directly carry out the remediation phase before scans are scheduled or System Restore is re-enabled.

Key Concept

CompTIA 7-Step Malware Remediation Process (Remediation Phase)
Rate this question

Topics

Malware Detection, Removal, and Prevention

More questions from this topic