A desktop technician at a pharmaceutical research laboratory is responding to a Windows workstation compromised by rogue software. Arrange the following remediation actions in the correct chronological sequence according to the CompTIA standard malware removal procedure.
- 1Isolate the infected computer by disconnecting all wired network cables and disabling Wi-Fi adapters.
- 2Disable Windows System Restore to prevent snapshotting of malicious files.
- 3Update anti-malware signature definitions and perform a comprehensive system scan to eliminate threats.
- 4Schedule recurring automatic anti-malware scans and configure operating system update settings.
- 5Re-enable System Restore and create a fresh system restore point.
Cevap
The correct sequence begins with isolating the infected system from the network, disabling System Restore, updating definitions and remediating the infection through scanning, scheduling future automated scans and updates, and finally re-enabling System Restore to create a clean baseline.
The official CompTIA 7-step malware remediation process dictates a strict linear workflow: 1. Identify symptoms, 2. Isolate infected systems, 3. Disable System Restore, 4. Remediate infected systems (update definitions and perform removal scans), 5. Schedule scans and run updates, 6. Enable System Restore and create a restore point, 7. Educate end user. Isolating network connectivity immediately contains the threat. Disabling System Restore ensures malicious payloads are not archived into system backup states. Updating anti-malware signatures and executing scans cleans the OS. Scheduling future scans maintains protection, and re-enabling System Restore provides a clean recovery baseline.
Adım Adım Çözüm
Anahtar Kavram
CompTIA 7-Step Malware Removal Process
Tahmini Süre:1m 30s