Examkin

Question

Difficulty: MediumMalware Detection, Removal, and Prevention

A desktop technician at a regional retail pharmacy chain is troubleshooting a Windows 11 workstation used for prescription tracking. The system is showing unauthorized pop-up messages and experiencing extreme system slowdown. The technician verifies the presence of rogue adware and immediately disconnects the Ethernet cable to isolate the system from the internal network. According to the CompTIA 7-step malware remediation process, what is the NEXT step the technician should perform?

  1. Disable System Restore in Windows.Answer
  2. B
    Update anti-malware signature files and run a full system scan.
  3. C
    Enable System Restore and create an uninfected system restore point.
  4. D
    Execute the sfc /scannow command from an elevated Command Prompt.

Answer

Disable System Restore in Windows before proceeding with malware removal.
The correct step is to disable System Restore in Windows. In the CompTIA 7-step malware remediation process (1. Identify symptoms, 2. Quarantine system, 3. Disable System Restore, 4. Remediate infected system, 5. Schedule updates, 6. Enable System Restore/create restore point, 7. Educate user), disabling System Restore immediately follows quarantining the system to ensure clean restore points later.

Step-by-Step Solution

1
Identify current state in the CompTIA 7-step malware remediation workflow.
The technician has completed Step 1 (Identify and verify malware symptoms) and Step 2 (Quarantine infected systems by disconnecting network access).
Tracking current progress ensures remediation steps occur in proper logical sequence.
2
Determine the next sequential remediation requirement.
Step 3 dictates disabling Windows System Restore prior to initiating scanning or removal tools.
If System Restore remains enabled during remediation, infected files or registry keys might be backed up automatically or restored later.
3
Select the correct technician action.
Disable System Restore in Windows.
Prepares the machine for safe malware remediation in Step 4.

Key Concept

CompTIA 7-Step Malware Remediation Process
Estimated Time:1m 0s
Rate this question

Topics

Malware Detection, Removal, and Prevention

More questions from this topic