Examkin

Question

Difficulty: MediumMalware Symptoms and Standard Removal Procedures

An IT support specialist at an architectural design firm is servicing a Windows 11 workstation. The computer was immediately disconnected from the local network after displaying unauthorized browser redirects and fake ransomware pop-ups. The specialist has just disabled System Restore on the machine to prevent infected state backups. According to standard CompTIA malware removal procedures, which action should the specialist take NEXT?

  1. Update anti-malware definitions and execute a comprehensive system scan to quarantine malicious files.Answer
  2. B
    Re-enable System Restore and create an updated restore point to safeguard system settings.
  3. C
    Replace the storage drive under the assumption that system degradation and pop-ups indicate hard drive failure.
  4. D
    Configure scheduled automated daily anti-malware scans and verify automatic OS patch deployment.

Answer

Update anti-malware definitions and execute a comprehensive system scan to quarantine malicious files.
The CompTIA 7-step malware removal workflow follows a mandatory order: 1. Identify malware symptoms, 2. Isolate infected systems, 3. Disable System Restore, 4. Remediate infected systems (update anti-malware signatures, scan, and use removal techniques), 5. Schedule scans and run updates, 6. Enable System Restore and create a restore point, and 7. Educate the end user. Since the technician has already isolated the system and disabled System Restore, the immediate next action is Step 4: updating definitions and performing remediation scans.

Step-by-Step Solution

1
Identify the current step in the CompTIA 7-step malware removal process.
The scenario describes identifying symptoms (Step 1), network isolation (Step 2), and disabling System Restore (Step 3).
Determining the completed steps establishes the required sequential progression.
2
Select the immediate next step in the procedure.
Step 4 is 'Remediate infected systems', which includes updating signature files and scanning/quarantining malware.
Active malware must be removed before scheduling future prevention tasks or re-enabling recovery tools.

Key Concept

CompTIA 7-Step Malware Removal Process (Step 4: Remediate Infected Systems)
Estimated Time:1m 30s
Rate this question

Topics

Malware Symptoms and Standard Removal Procedures

More questions from this topic