Examkin

Soru

Zorluk: OrtaMalware Detection, Removal, and Prevention

An IT support technician at a hotel reception network center is troubleshooting a Windows workstation affected by keylogger malware. The technician has confirmed the infection, isolated the machine from the network, and disabled System Restore. Which of the following actions should the technician perform NEXT according to the CompTIA standard 7-step malware remediation process?

  1. Update the anti-malware signature definitions and perform a full system remediation scan.Cevap
  2. B
    Enable System Restore and generate a clean restore point to safeguard system settings.
  3. C
    Configure Task Scheduler to automate daily signature updates and routine system scans.
  4. D
    Conduct an end-user security awareness session regarding safe browsing and email attachments.

Cevap

Update the anti-malware signature definitions and perform a full system remediation scan.
The standard CompTIA 7-step malware remediation process follows a strict order: 1. Identify symptoms, 2. Quarantine infected system, 3. Disable System Restore, 4. Remediate infected systems (update anti-malware signatures and scan/remove), 5. Schedule updates and scans, 6. Enable System Restore and create a restore point, 7. Educate end-user. Because steps 1 through 3 are complete, the technician must execute Step 4 next by updating the anti-malware engine definitions and running a thorough remediation scan.

Adım Adım Çözüm

1
Identify completed steps in the CompTIA 7-step malware remediation framework.
Step 1 (Identify symptoms), Step 2 (Quarantine system), and Step 3 (Disable System Restore) have already been completed.
Determining the current phase ensures proper progression without omitting required isolation or repair actions.
2
Determine the mandatory next phase in sequence.
Step 4 is 'Remediate infected systems'.
Remediation consists of updating anti-malware signatures/tools and conducting comprehensive scans to detect and remove active malware.
3
Select the option that corresponds to updating definition files and scanning.
Updating anti-malware signatures and running a full system scan is the direct next action.
Scanning with outdated signatures may fail to remove newly mutated malware strains.

Anahtar Kavram

CompTIA 7-Step Malware Remediation Process Sequence
Tahmini Süre:1m 15s
Bu soruyu puanla

Konular

Malware Detection, Removal, and Prevention

Bu konudan daha fazla soru