Examkin

Question

Difficulty: EasyMalware Detection, Removal, and Prevention

A desktop technician has quarantined a Windows workstation that was infected with malware. Before executing a full anti-malware scan to clean the system, which TWO steps of the CompTIA 7-step malware remediation process must be performed?

  1. Disable System Restore in WindowsAnswer
  2. Update the anti-malware signature definitionsAnswer
  3. C
    Create a new system restore point
  4. D
    Reconnect the workstation to the corporate network to download OS updates

Answer

The technician must disable System Restore in Windows and update the anti-malware signature definitions before scanning and cleaning the machine.
According to the CompTIA 7-step malware remediation process, once a machine is isolated (quarantined), the technician must disable System Restore (Step 3) so that infected system states are not preserved. Next, as part of remediation (Step 4), the technician must update anti-malware signature files before initiating the scan to ensure detection signatures are up to date.

Step-by-Step Solution

1
Review the CompTIA 7-Step Malware Remediation Process order
Identify that Step 3 is Disable System Restore and Step 4 starts with updating anti-malware definitions prior to scanning.
Disabling System Restore prevents malware from preserving infected system files, and updating definitions ensures accurate detection.
2
Evaluate the prerequisite actions before running the scan
Select disabling System Restore and updating anti-malware definitions as required pre-scan tasks.
Pre-scan steps prepare the operating system and tools so the scan is effective and isolated.

Key Concept

CompTIA 7-Step Malware Remediation Process (Step 3: Disable System Restore; Step 4: Remediate infected systems by updating anti-malware and scanning)
Rate this question

Topics

Malware Detection, Removal, and Prevention

More questions from this topic