Examkin

Question

Difficulty: MediumMalware Symptoms and Standard Removal Procedures

A systems administrator at a biotechnology research laboratory isolates an infected Windows 11 workstation from the local network and disables System Restore after observing unauthorized background data transmission and security alerts. The administrator then updates the anti-malware definitions and successfully removes all identified malicious software using a custom bootable scanner. According to CompTIA's standard 7-step malware removal procedures, what is the IMMEDIATE next step the administrator should take?

  1. Schedule recurring anti-malware scans and verify that operating system updates are configured.Answer
  2. B
    Re-enable System Restore and manually generate a clean restore point for the operating system.
  3. C
    Reconnect the workstation to the laboratory network to confirm that normal network communication is restored.
  4. D
    Conduct security awareness training with the primary user to prevent future social engineering compromises.

Answer

Schedule recurring anti-malware scans and verify that operating system updates are configured.
The correct answer represents Step 5 of the CompTIA 7-step malware removal process (Schedule scans and run updates). Once malware is successfully removed during the remediation phase (Step 4), the technician must set up automated recurring scans and ensure the OS and security software receive the latest updates to prevent re-infection.

Step-by-Step Solution

1
Review the completed steps of the CompTIA 7-step malware removal process in the scenario.
The administrator has completed Step 1 (Identify symptoms), Step 2 (Quarantine infected system), Step 3 (Disable System Restore), and Step 4 (Remediate infected system by updating definitions and scanning/removing malware).
Determining the current phase of the remediation workflow identifies which step must follow next.
2
Identify the official fifth step of the CompTIA malware removal model.
Step 5 requires scheduling automatic anti-malware scans and installing/configuring operating system and security updates.
Scheduling scans and applying security patches ensures long-term system integrity before re-enabling System Restore or placing the system back into production.

Key Concept

CompTIA 7-Step Malware Removal Process Order
Rate this question

Topics

Malware Symptoms and Standard Removal Procedures

More questions from this topic