Examkin

Question

Difficulty: EasyMalware Detection, Removal, and Prevention

A helpdesk technician suspects that a user's Windows 11 desktop has been infected with network-aware malware after observing unauthorized outbound network traffic. Which of the following actions should the technician perform NEXT according to the standard malware remediation process?

  1. Disconnect the computer from the local network and disable all wireless adapters.Answer
  2. B
    Disable System Restore in the Windows System Properties settings.
  3. C
    Update the local anti-malware signatures and perform a full system scan.
  4. D
    Create a new System Restore point to preserve current configurations.

Answer

Disconnect the computer from the local network and disable all wireless adapters.
According to CompTIA's official 7-step malware remediation process, once malware symptoms are identified (Step 1), the immediate next step is to quarantine the infected system (Step 2). Disconnecting the network cable and turning off Wi-Fi isolates the machine to prevent potential lateral spreading across the network.

Step-by-Step Solution

1
Identify the current step in the CompTIA 7-step malware remediation process.
The technician has completed Step 1 (Identify malware symptoms).
Malware symptoms have been observed on the system.
2
Determine the mandatory next sequential step.
Step 2 is to quarantine the infected system.
Isolating the device physically or logically prevents the malware from spreading to other assets on the network.

Key Concept

CompTIA 7-Step Malware Remediation Best Practices
Estimated Time:45s
Rate this question

Topics

Malware Detection, Removal, and Prevention

More questions from this topic