Examkin

Question

Difficulty: MediumMalware Symptoms and Standard Removal Procedures

A workstation operating in a clinical laboratory was disconnected from the network after exhibiting persistent rogue browser redirects and unauthorized background network traffic. The technician has confirmed the malware infection and completed the isolation step. According to standard CompTIA malware removal procedures, which of the following actions should the technician perform prior to running a full anti-malware system scan? (Select TWO.)

  1. Disable System Restore in Windows System PropertiesAnswer
  2. Update the anti-malware definition files and scanning engineAnswer
  3. C
    Enable System Restore and generate an immediate fresh system restore point
  4. D
    Provide end-user security awareness training regarding suspicious link clicks

Answer

The technician must disable System Restore and update the anti-malware definition files prior to initiating the full system scan.
According to CompTIA's 7-step malware removal process, after identifying the malware (Step 1) and isolating the system (Step 2), the technician must disable System Restore (Step 3). This prevents Windows from capturing infected files in restore points. Then, as part of remediation (Step 4), the technician must update the anti-malware signatures (Step 4a) prior to initiating the scan and removal phase (Step 4b).

Step-by-Step Solution

1
Review the CompTIA 7-step malware remediation process sequence.
Identified the sequence: 1. Identify, 2. Isolate, 3. Disable System Restore, 4. Remediate (Update definitions & Scan/Clean), 5. Schedule scans/updates, 6. Enable System Restore & create restore point, 7. Educate user.
Correct ordering prevents malware persistence and ensures effective remediation.
2
Identify required actions immediately preceding the full scan phase within Step 3 and Step 4a.
Disabling System Restore prevents infected files from being saved into restore points. Updating anti-malware signatures ensures the scanner has the newest threat signatures.
Both actions must occur before initiating the system scan (Step 4b).

Key Concept

CompTIA 7-Step Malware Removal Procedure
Rate this question

Topics

Malware Symptoms and Standard Removal Procedures

More questions from this topic