Examkin

Soru

Zorluk: OrtaMalware Symptoms and Standard Removal Procedures

A systems administrator suspects that a network-connected Windows 11 workstation at a renewable energy research facility is infected with malware after observing unexpected outbound data transfers and rogue pop-up notifications. Following CompTIA's standard 7-step malware removal procedure, which of the following actions should the administrator take BEFORE initializing anti-malware scanning tools? (Select TWO.)

  1. Disconnect physical network cables and disable all wireless network interfaces on the affected workstation.Cevap
  2. Disable System Restore in Windows to prevent infected files from being saved in system restore points.Cevap
  3. C
    Re-enable System Restore and generate an immediate restore point prior to running removal tools.
  4. D
    Conduct end-user training on recognizing social engineering tactics and suspicious email attachments.

Cevap

The administrator should disconnect physical network cables and disable all wireless network interfaces on the affected workstation, as well as disable System Restore in Windows to prevent infected files from being saved in system restore points.
According to CompTIA's 7-step malware removal procedure, once symptoms are identified (Step 1), the immediate subsequent actions required before remediation and scanning (Step 4) are isolating the infected system (Step 2) by disconnecting all network interfaces, and disabling System Restore (Step 3) to clear any restore points that might contain malicious files.

Adım Adım Çözüm

1
Identify malware symptoms
Malware infection suspected due to rogue pop-ups and unusual outbound traffic (Step 1 complete).
Recognizing signs of infection establishes the necessity for malware remediation.
2
Isolate the infected system
Disconnect Ethernet network cables and disable Wi-Fi/Bluetooth interfaces.
Isolating the system contains the infection, stopping it from spreading to other network devices or leaking data.
3
Disable System Restore
Turn off Windows System Restore functionality.
This deletes existing restore points, preventing malware from backing itself up into restore points or reinfecting the system later.

Anahtar Kavram

CompTIA 7-step malware removal procedure order of execution
Bu soruyu puanla

Konular

Malware Symptoms and Standard Removal Procedures

Bu konudan daha fazla soru