Examkin

Question

Difficulty: EasyMalware Detection, Removal, and Prevention

An employee contacts the IT help desk reporting that their corporate desktop is displaying continuous pop-up advertisements and experiencing unusual performance delays. A support technician inspects the computer and identifies symptoms of an active adware infection. According to the CompTIA 7-step malware remediation process, which of the following actions should the technician take NEXT?

  1. A
    Disable System Restore in Windows to prevent saving infected files to restore points.
  2. Quarantine the compromised desktop by disconnecting its network connection.Answer
  3. C
    Download and install the latest anti-malware definition updates onto the workstation.
  4. D
    Execute the sfc /scannow command using an elevated Command Prompt window.

Answer

Quarantine the compromised desktop by disconnecting its network connection.
Following the standard CompTIA 7-step malware remediation process, once malware symptoms are identified (Step 1), the immediate next step is to quarantine the infected system (Step 2). Disconnecting the network interface isolates the system and prevents potential lateral movement of the infection.

Step-by-Step Solution

1
Identify the current step in the CompTIA 7-step malware remediation process.
The technician has completed Step 1 (Identify malware symptoms).
Recognizing rogue pop-ups and performance issues confirms the presence of malware.
2
Determine the mandatory next step in the standard sequence.
Step 2 is to quarantine the infected system.
Quarantining (disconnecting network/Wi-Fi) prevents the malware from spreading to other systems on the network or communicating with remote command-and-control servers.

Key Concept

CompTIA 7-Step Malware Remediation Process (Step 2: Quarantine infected systems)
Rate this question

Topics

Malware Detection, Removal, and Prevention

More questions from this topic