A desktop computer at a financial advisory branch office is experiencing severe system sluggishness, unauthorized browser pop-up windows, and rogue security software alerts. An IT technician confirms that malware is present on the workstation. According to the CompTIA 7-step malware removal procedure, which of the following actions should the technician take PRIOR to executing a full anti-malware system scan? (Select TWO.)
- Isolate the infected workstation by disconnecting all wired and wireless network connections.Cevap
- Disable System Restore in Windows to prevent corrupted restore points from retaining infected files.Cevap
- CRe-enable System Restore and create a fresh recovery point to protect current user configurations.
- DReplace the system storage drive assuming that severe OS sluggishness indicates imminent hardware failure.
Cevap
The technician should isolate the infected workstation by disconnecting network connections and disable System Restore prior to executing the anti-malware scan.
In the standard CompTIA 7-step malware removal process (1. Identify, 2. Isolate, 3. Disable System Restore, 4. Remediate, 5. Schedule scans/updates, 6. Enable System Restore, 7. Educate end user), isolating the infected machine and disabling System Restore are the essential steps performed immediately before remediating the system with anti-malware updates and scans.
Adım Adım Çözüm
Anahtar Kavram
CompTIA 7-Step Malware Removal Procedure