An IT technician at a boutique hotel front desk is responding to a Windows 10 workstation that displays rogue pop-up messages and exhibits unprompted network traffic. The technician has confirmed malware symptoms and immediately disconnected the workstation from the Ethernet network and Wi-Fi. According to the CompTIA 7-step malware removal process, which of the following actions should the technician perform next?
- Disable System Restore in Windows.Cevap
- BUpdate anti-malware signatures and perform a full system scan.
- CReplace the physical network interface card to resolve local network degradation.
- DProvide security awareness training to the hotel front desk staff.
Cevap
Disable System Restore in Windows.
In the standard CompTIA 7-step malware removal procedure (1. Identify symptoms, 2. Isolate infected systems, 3. Disable System Restore, 4. Remediate infected systems, 5. Schedule scans and updates, 6. Enable System Restore and create restore point, 7. Educate end user), the technician has already completed steps 1 and 2. Therefore, the immediate next step is to disable System Restore so that infected files are not accidentally backed up or protected by system protection mechanisms.
Adım Adım Çözüm
Anahtar Kavram
CompTIA 7-Step Malware Removal Process