Examkin

Question

Difficulty: MediumMalware Symptoms and Standard Removal Procedures

An IT technician at a marine research station is troubleshooting a Windows 11 workstation displaying unexpected pop-up advertisements and modified system host files. Place the following malware remediation actions in the correct sequential order according to the standard CompTIA 7-step malware removal procedure, starting immediately after symptom identification.

  1. 1Disconnect the workstation from the physical network and disable all wireless connections.
  2. 2Disable System Restore in the Windows System Properties settings.
  3. 3Update anti-malware definition signatures and run a full system scan in Safe Mode.
  4. 4Configure scheduled anti-malware scans and enable automatic operating system updates.
  5. 5Enable System Restore and generate a clean system restore point.

Answer

The proper sequence follows CompTIA's 7-step malware removal workflow: Isolate the workstation by disconnecting all network interfaces, Disable System Restore to delete infected restore points, Remediate the system by updating signatures and scanning in Safe Mode, Schedule automated scans and OS updates, and finally Enable System Restore to create a fresh restore point.
The correct sequence directly aligns with CompTIA's official 7-step remediation framework: 1. Identify symptoms (described in the stem context), 2. Isolate the infected system (unplug cables/disable Wi-Fi), 3. Disable System Restore (purge infected snapshots), 4. Remediate infected systems (update definitions and run full scans), 5. Schedule scans and enable updates, 6. Enable System Restore and create a clean restore point, and 7. Educate the end user.

Step-by-Step Solution

1
Isolate the infected workstation
The device is disconnected from Ethernet and Wi-Fi networks.
Prevents lateral movement of malware to other network assets.
2
Disable System Restore
System protection snapshots harbouring infected binaries are purged.
Ensures malware cannot persist inside Windows restore points.
3
Remediate infected system
Anti-malware definitions are updated and a scan cleans active threats.
Removes malicious files, registry entries, and corrupted host file modifications.
4
Schedule scans and updates
Automated recurring scans and automatic updates are configured.
Maintains ongoing system protection against recurring or new vulnerabilities.
5
Enable System Restore and create restore point
System protection is enabled and a clean baseline snapshot is stored.
Establishes a verified, healthy state for future system recovery.

Key Concept

CompTIA 7-Step Malware Removal Procedure
Rate this question

Topics

Malware Symptoms and Standard Removal Procedures

More questions from this topic