Question

Difficulty: EasyMalware Symptoms and Standard Removal Procedures

After isolating an infected Windows workstation and disabling System Restore, a technician successfully remediates the system by running a full anti-malware scan and removing all detected threats. Which action should the technician take NEXT according to the standard CompTIA 7-step malware removal procedure?

  1. Schedule recurring anti-malware scans and operating system updatesAnswer
  2. B
    Re-enable System Restore and create a new system restore point
  3. C
    Provide security awareness training to the primary workstation user
  4. D
    Open Event Viewer to monitor real-time processor performance counters

Answer

Schedule recurring anti-malware scans and operating system updates
Under the standard CompTIA 7-step malware removal process, Step 5 (Schedule scans and run updates) must immediately follow Step 4 (Remediate infected systems). Scheduling future anti-malware scans and verifying operating system updates ensures long-term protection before turning System Restore back on.

Step-by-Step Solution

1
Identify current progress within the CompTIA 7-step malware removal process
The scenario indicates that Step 4 (Remediate infected systems) has just been completed.
Knowing the exact step completed allows selection of the next sequential action.
2
Determine the action required for Step 5
Step 5 requires scheduling automatic scans and installing system updates.
Automating scans and updating software ensures the system is protected against new threats before system restore baseline points are established.

Key Concept

CompTIA 7-Step Malware Removal Process (Step 5: Schedule scans and run updates)
Rate this question