Examkin

Soru

Zorluk: KolayMalware Detection, Removal, and Prevention

A technician has isolated a Windows workstation after detecting a malware infection. Before initiating the anti-malware remediation scan, which TWO actions should the technician take according to the standard CompTIA malware remediation process? (Select TWO.)

  1. Disable System Restore in Windows.Cevap
  2. Update the local anti-malware software signature definitions.Cevap
  3. C
    Enable System Restore and create a new restore point.
  4. D
    Educate the end user on safe internet browsing practices.

Cevap

The technician should disable System Restore in Windows and update the local anti-malware software signature definitions prior to running the scan.
According to the CompTIA 7-step malware remediation process, once an infected system has been quarantined (Step 2), the technician must disable System Restore (Step 3) so that infected system files are not preserved in Windows restore points. Next, before executing the anti-malware scan (Step 4), the technician must update the malware signature definitions to ensure the scanner can recognize the latest threats.

Adım Adım Çözüm

1
Identify the current stage of the CompTIA 7-step malware remediation process.
The device has already been isolated/quarantined (Step 2).
Determining the current phase dictates which pre-scan steps must be completed next.
2
Select the required actions before launching an anti-malware scan.
Step 3 requires disabling System Restore, and the initial phase of Step 4 requires updating antivirus signatures.
Disabling System Restore prevents malware from being preserved in system restore snapshots, and updated definitions ensure full threat detection coverage.

Anahtar Kavram

CompTIA 7-Step Malware Remediation Process - Pre-Scan Preparation
Bu soruyu puanla

Konular

Malware Detection, Removal, and Prevention

Bu konudan daha fazla soru