Examkin

Question

Difficulty: MediumMalware Symptoms and Standard Removal Procedures

An IT support specialist at an esports venue is troubleshooting a Windows 11 video production workstation that is displaying unexpected pop-up warnings and suffering from degraded system performance. The specialist confirms the presence of active malware and immediately disconnects the Ethernet cable and disables all wireless network adapters to isolate the host. According to standard CompTIA malware removal procedures, which of the following actions should the specialist perform NEXT?

  1. Disable Windows System Restore on the infected workstation.Answer
  2. B
    Execute a full anti-malware system scan in Safe Mode.
  3. C
    Create a new manual restore point to capture the current system state.
  4. D
    Connect the system to an isolated VLAN to download updated antimalware signatures.

Answer

Disable Windows System Restore on the infected workstation.
According to CompTIA's official 7-step malware remediation process (1. Identify, 2. Isolate, 3. Disable System Restore, 4. Remediate, 5. Schedule scans/updates, 6. Enable System Restore, 7. Educate end user), once the infected machine is isolated from the network (Step 2), the immediate next requirement is to disable System Restore (Step 3). This removes existing restore points so infected system files cannot linger or be restored later.

Step-by-Step Solution

1
Identify the current step in the CompTIA 7-step malware removal process.
The technician has completed Step 1 (Identify malware symptoms) and Step 2 (Isolate infected systems by disconnecting network interfaces).
Correct progression through the procedure requires completing steps in sequential order.
2
Determine the mandatory action required for Step 3.
Step 3 dictates disabling System Restore in Windows.
Disabling System Restore purges existing restore points and prevents Windows from automatically caching malicious files into system restore archives during cleanup.

Key Concept

CompTIA 7-Step Malware Removal Process
Rate this question

Topics

Malware Symptoms and Standard Removal Procedures

More questions from this topic