Examkin

Question

Difficulty: MediumMalware Detection, Removal, and Prevention

A workstation support technician at a pharmaceutical logistics facility is troubleshooting a Windows 11 workstation infected with a Trojan. The system has already been isolated from the network, and System Restore has been disabled. Which of the following actions should the technician take NEXT as part of the remediation process? (Select TWO.)

  1. Update the local anti-malware signatures and scan engine to the latest available definitions.Answer
  2. Execute a thorough anti-malware scan using specialized tools to quarantine identified threats.Answer
  3. C
    Re-enable Windows System Restore and generate a fresh system restore point.
  4. D
    Conduct security awareness training with the primary user to prevent future infections.

Answer

The technician should update the local anti-malware signatures and scan engine, and execute a thorough anti-malware scan using specialized tools to quarantine identified threats.
According to the CompTIA 7-step malware remediation process, once the system is isolated (Step 2) and System Restore is disabled (Step 3), the technician must proceed to Step 4: Remediate the infected systems. Step 4 requires two key actions: first, updating the anti-malware signatures and engines, and second, executing a full scan using anti-malware tools to quarantine and remove the infection.

Step-by-Step Solution

1
Identify the current phase of the CompTIA 7-step malware removal process.
The system has been identified (Step 1), isolated (Step 2), and System Restore has been disabled (Step 3). The next sequential phase is Step 4: Remediate the infected systems.
Remediation must follow isolation and disabling restore points to prevent malware from persisting in backups or spreading.
2
Determine the mandatory sub-steps required for system remediation (Step 4).
Step 4 consists of (a) updating anti-malware signatures/software and (b) scanning and using removal techniques (e.g., Safe Mode or standalone tools).
Outdated signatures may miss active malware variants, making an immediate update essential prior to running the scan.
3
Evaluate the choices to select the two actions corresponding to Step 4.
Updating anti-malware signatures and executing a thorough anti-malware scan are the correct next remediation steps.
Re-enabling System Restore (Step 6) and educating the end user (Step 7) are post-remediation steps.

Key Concept

CompTIA 7-Step Malware Remediation Process - Step 4: Remediate Infected Systems
Estimated Time:1m 30s
Rate this question

Topics

Malware Detection, Removal, and Prevention

More questions from this topic