An IT support technician at a regional veterinary hospital is responding to a Windows 11 workstation that is showing rogue pop-up security alerts and browser redirects. Place the following remediation actions in the correct chronological order according to CompTIA's standard 7-step malware removal procedure.
- 1Disconnect the workstation from the hospital's wired and wireless networks.
- 2Disable System Restore on the workstation.
- 3Update anti-malware signatures and perform a full system scan to remove infected files.
- 4Re-enable System Restore and create a clean system restore point.
- 5Educate the clinic staff member on recognizing malicious email links and safe web browsing practices.
Cevap
The correct order follows the standard CompTIA malware removal steps: 1. Disconnect the workstation from wired/wireless networks (Isolate system), 2. Disable System Restore, 3. Update anti-malware signatures and perform a full scan (Remediate system), 4. Re-enable System Restore and create a clean restore point, 5. Educate the clinic staff member (Educate end user).
CompTIA defines a strict sequence for malware remediation: 1. Identify symptoms, 2. Isolate the infected system, 3. Disable System Restore, 4. Remediate infected systems (update definitions, scan, and remove), 5. Schedule scans and updates, 6. Enable System Restore and create a restore point, 7. Educate the end user. Disconnecting network interfaces immediately isolates the system. Disabling System Restore purges infected backup files. Remediation updates software and removes malware. Once clean, System Restore is turned back on to create a baseline. User education finishes the process.
Adım Adım Çözüm
Anahtar Kavram
CompTIA 7-Step Malware Removal Process