Examkin

Question

Difficulty: MediumMalware Detection, Removal, and Prevention

A systems technician at a municipal water treatment facility has just finished isolating a Windows workstation infected with a spyware keylogger, disabling System Restore, updating the antivirus definitions in Safe Mode, and successfully removing the malicious software. Which of the following actions should the technician perform NEXT according to the standard CompTIA malware remediation process?

  1. Schedule automatic anti-malware updates and routine system scansAnswer
  2. B
    Re-enable System Restore and create a fresh system restore point
  3. C
    Conduct a security awareness session to educate the end user
  4. D
    Open Event Viewer to review system event logs for administrative tool execution errors

Answer

The technician should schedule automatic anti-malware updates and routine system scans.
The CompTIA 7-step malware remediation process follows a specific order: 1. Identify malware symptoms, 2. Quarantine infected systems, 3. Disable System Restore, 4. Remediate infected systems (update anti-malware signatures, scan, and remove), 5. Schedule updates and initiate scans, 6. Enable System Restore and create a restore point, and 7. Educate the end user. Since remediation (Step 4) has just concluded, the correct next action is Step 5: scheduling updates and scans.

Step-by-Step Solution

1
Identify the current step in the CompTIA 7-step malware remediation process.
The technician has completed Step 1 (Identify), Step 2 (Quarantine), Step 3 (Disable System Restore), and Step 4 (Remediate: update anti-malware and scan/remove).
Tracking current progress ensures strict adherence to standard operating procedures.
2
Determine the next sequential step in the process.
Step 5 is 'Schedule updates and initiate scans'.
Scheduling updates and scans ensures the system remains protected against future infections before finalizing system configuration.
3
Select the option that matches Step 5.
Scheduling automatic anti-malware updates and routine system scans.
This directly fulfills Step 5 of the 7-step remediation workflow.

Key Concept

CompTIA 7-Step Malware Remediation Process
Rate this question

Topics

Malware Detection, Removal, and Prevention

More questions from this topic