A desktop support technician at a municipal water utility is responding to a Windows 11 workstation that was infected with malware via a malicious email attachment. The technician has already identified and confirmed the malware infection symptoms. In what order should the technician execute the following remediation steps according to the standard CompTIA 7-step malware removal procedure?
- 1Disconnect the workstation from the municipal network and disable all wireless adapters.
- 2Disable Windows System Restore on the infected workstation.
- 3Update anti-malware signatures and execute a full system scan in an isolated environment.
- 4Re-enable Windows System Restore and generate a clean system restore point.
- 5Conduct end-user training on recognizing social engineering and phishing attachments.
Cevap
The correct order follows CompTIA's 7-step malware removal process: first quarantine the system by disconnecting network connections, next disable System Restore, then remediate the system by updating signatures and scanning, followed by re-enabling System Restore to create a clean restore point, and finally educating the end user.
The standard CompTIA 7-step malware remediation process specifies the following sequence: 1) Identify malware symptoms, 2) Quarantine infected systems, 3) Disable System Restore, 4) Remediate infected systems (update definitions and scan), 5) Schedule scans and run updates, 6) Enable System Restore and create a restore point, and 7) Educate the end user. Disconnecting network interfaces isolates the device first, followed by turning off System Restore, running updated anti-malware scans, re-enabling System Restore to build a clean baseline, and concluding with user education.
Adım Adım Çözüm
Anahtar Kavram
CompTIA 7-Step Malware Removal Procedure