Examkin

Question

Difficulty: MediumMalware Detection, Removal, and Prevention

A cybersecurity technician at a commercial maritime container terminal is troubleshooting a Windows 11 workstation used for crane operations. The workstation is displaying rogue pop-up advertisements and experiencing unauthorized browser redirects. The technician has already isolated the workstation from the local network to quarantine it and has disabled System Restore. Which of the following actions should the technician perform NEXT according to the standard CompTIA malware remediation process?

  1. Update the anti-malware software engine and signature definitions.Answer
  2. B
    Initiate a full system scan using the existing anti-malware definitions.
  3. C
    Re-enable System Restore and create a clean system restore point.
  4. D
    Execute `sfc /scannow` from an elevated command prompt window.

Answer

Update the anti-malware software engine and signature definitions.
According to the official CompTIA 7-step malware remediation workflow, once the malware symptoms have been identified, the system quarantined, and System Restore disabled, the technician must enter Step 4 (Remediate infected systems). Step 4 is subdivided into updating anti-malware software definitions first (Step 4a) and then running malware scans and removal tools second (Step 4b). Updating the definitions ensures the scanner has the most current detection signatures.

Step-by-Step Solution

1
Review the current phase within the CompTIA 7-step malware remediation process.
Identified that Step 1 (Identify symptoms), Step 2 (Quarantine system), and Step 3 (Disable System Restore) have already been completed.
Determines which step comes next in the strict sequential workflow.
2
Identify the immediate next requirement in Step 4 (Remediate infected systems).
Step 4a is to update anti-malware software and signature definitions (via removable media or isolated environment update package if network access is restricted).
Anti-malware software requires the latest threat signatures to effectively detect and quarantine modern malware strains during the scan phase.
3
Select the option that matches updating signature definitions prior to scanning.
Selected 'Update the anti-malware software engine and signature definitions.'
This strictly adheres to standard remediation procedures before performing scans or re-enabling system services.

Key Concept

CompTIA 7-Step Malware Remediation Process (Step 4a: Update anti-malware signatures)
Estimated Time:1m 0s
Rate this question

Topics

Malware Detection, Removal, and Prevention

More questions from this topic