Examkin

Soru

Zorluk: OrtaMalware Detection, Removal, and Prevention

A desktop technician at an online retail fulfillment center is troubleshooting a Windows 11 workstation. The machine was isolated from the network after an employee reported rogue browser pop-ups and unauthorized system settings changes. The technician has verified the malware symptoms, quarantined the workstation, and disabled System Restore. Which of the following is the NEXT step the technician should perform according to the standard CompTIA malware remediation process?

  1. A
    Run sfc /scannow with the /r switch to repair corrupted boot sector files.
  2. B
    Launch Event Viewer to monitor real-time processor and memory utilization.
  3. Update the anti-malware software and signature definition files.Cevap
  4. D
    Boot into Safe Mode and immediately perform a full remediation scan.

Cevap

Update the anti-malware software and signature definition files.
According to the CompTIA 7-step malware remediation process, once System Restore has been disabled (Step 3), the technician must begin remediation (Step 4). Remediation specifically requires updating anti-malware software and definition files (Step 4a) before executing full system scans and removal techniques (Step 4b).

Adım Adım Çözüm

1
Review the CompTIA 7-step malware remediation process sequence.
Process order: 1. Identify symptoms, 2. Quarantine, 3. Disable System Restore, 4. Remediate (a. Update anti-malware, b. Scan/remove), 5. Schedule updates/scans, 6. Enable System Restore & create restore point, 7. Educate user.
CompTIA standards mandate a strict sequence to ensure complete malware eradication.
2
Identify current progress in the scenario.
Steps 1 (Identify), 2 (Quarantine), and 3 (Disable System Restore) are already complete.
Determines the precise entry point into the remediation workflow.
3
Determine the mandatory next sub-step.
Sub-step 4a is updating the anti-malware software and signature definition files prior to scanning (4b).
Updating definitions ensures the scanner has the newest threat signatures to detect and remove the active infection effectively.

Anahtar Kavram

CompTIA 7-Step Malware Remediation Process
Tahmini Süre:1m 15s
Bu soruyu puanla

Konular

Malware Detection, Removal, and Prevention

Bu konudan daha fazla soru