Question

Difficulty: MediumMalware Detection, Removal, and Prevention

A desktop support technician at an automotive assembly plant is responding to a workstation infected with rogue adware causing unexpected browser redirects. The technician has already identified and researched the malware symptoms. Arrange the subsequent remediation actions in the correct chronological order according to the standard CompTIA 7-step malware removal process.

  1. 1Disconnect the workstation's network cable to quarantine the infected system.
  2. 2Disable Windows System Restore to prevent infected restore points from persisting.
  3. 3Update anti-malware definitions and perform a full remediation scan.
  4. 4Re-enable Windows System Restore and create a clean restore point.
  5. 5Educate the workstation user on avoiding suspicious links and rogue downloads.

Answer

The correct sequence follows the CompTIA 7-step malware remediation process: first quarantine the infected workstation, then disable System Restore, proceed with updating definitions and scanning for malware removal, re-enable System Restore and create a clean restore point, and finish by educating the end user.
The standard CompTIA 7-step malware removal framework mandates the following exact order: 1. Identify malware symptoms, 2. Quarantine infected systems, 3. Disable System Restore, 4. Remediate infected systems (update anti-malware definitions and scan/remove), 5. Schedule updates and enable auto-scans, 6. Enable System Restore and create a restore point, and 7. Educate the end user. The sequence from isolating the system to educating the user adheres strictly to this standard.

Step-by-Step Solution

1
Quarantine the infected workstation
Network communication is terminated, isolating the rogue adware from the rest of the assembly plant network.
Step 2 of the CompTIA process prevents malware from spreading or contacting command-and-control servers.
2
Disable Windows System Restore
Existing restore points containing malicious files are deleted.
Step 3 prevents accidental reinfection if a restore point is restored in the future.
3
Update anti-malware signatures and perform full system scan
The rogue adware is identified and completely removed from the host.
Step 4 performs the core remediation and file cleanup using updated detection definitions.
4
Re-enable System Restore and create a fresh restore point
A clean, verified system baseline snapshot is preserved.
Step 6 re-establishes system protection only after verifying the machine is clean.
5
Educate the end user
The user learns best practices to prevent similar infections.
Step 7 is the final administrative action to reduce human security vulnerabilities.

Key Concept

CompTIA 7-Step Malware Remediation Process
Estimated Time:1m 30s
Rate this question