Examkin

Soru

Zorluk: ZorMalware Symptoms and Standard Removal Procedures

A desktop support specialist is servicing a dedicated CAD engineering workstation in a manufacturing plant. The machine was disconnected from the network immediately after exhibiting severe performance degradation and launching unauthorized processes. The technician has confirmed the presence of active malware and successfully disabled System Restore. According to standard CompTIA malware removal procedures, which of the following actions should the technician perform NEXT?

  1. Update the antimalware definition files using a verified external medium, then perform a comprehensive system scan.Cevap
  2. B
    Reconnect the ethernet cable briefly to allow the installed antimalware software to pull the latest definitions directly from the vendor cloud.
  3. C
    Enable System Restore and create an immediate restore point to preserve system state before initiating file deletion.
  4. D
    Execute the sfc /scannow command from an elevated prompt to replace corrupted system binaries prior to scanning for virus signatures.

Cevap

Update the antimalware definition files using a verified external medium, then perform a comprehensive system scan.
Following the CompTIA 7-step malware remediation process (Identify, Isolate, Disable System Restore, Remediate, Schedule scans/updates, Enable System Restore/Create restore point, Educate user), after disabling System Restore, the technician enters the Remediate phase. This requires updating the antimalware software and definitions—using clean offline media since the machine is network-isolated—and executing thorough scans to remove the threat.

Adım Adım Çözüm

1
Analyze the current state within the CompTIA 7-Step Malware Removal process.
The technician has already identified the symptoms (Step 1), isolated the system (Step 2), and disabled System Restore (Step 3).
Tracking progress through the framework determines the exact next procedural phase.
2
Identify the next required step in the standard procedure.
Step 4 is Remediate Infected Systems, which consists of updating antimalware signatures and executing scans/removal techniques.
Remediation requires fresh definition signatures applied in a safe environment (such as offline updates via clean media) to ensure all threat variants are detected without breaking isolation.

Anahtar Kavram

CompTIA 7-Step Malware Removal Procedure - Remediation Phase
Bu soruyu puanla

Konular

Malware Symptoms and Standard Removal Procedures

Bu konudan daha fazla soru