Examkin

Soru

Zorluk: KolayMalware Detection, Removal, and Prevention

A helpdesk technician suspects that a user's Windows 11 desktop has been infected with network-aware malware after observing unauthorized outbound network traffic. Which of the following actions should the technician perform NEXT according to the standard malware remediation process?

  1. Disconnect the computer from the local network and disable all wireless adapters.Cevap
  2. B
    Disable System Restore in the Windows System Properties settings.
  3. C
    Update the local anti-malware signatures and perform a full system scan.
  4. D
    Create a new System Restore point to preserve current configurations.

Cevap

Disconnect the computer from the local network and disable all wireless adapters.
According to CompTIA's official 7-step malware remediation process, once malware symptoms are identified (Step 1), the immediate next step is to quarantine the infected system (Step 2). Disconnecting the network cable and turning off Wi-Fi isolates the machine to prevent potential lateral spreading across the network.

Adım Adım Çözüm

1
Identify the current step in the CompTIA 7-step malware remediation process.
The technician has completed Step 1 (Identify malware symptoms).
Malware symptoms have been observed on the system.
2
Determine the mandatory next sequential step.
Step 2 is to quarantine the infected system.
Isolating the device physically or logically prevents the malware from spreading to other assets on the network.

Anahtar Kavram

CompTIA 7-Step Malware Remediation Best Practices
Tahmini Süre:45s
Bu soruyu puanla

Konular

Malware Detection, Removal, and Prevention

Bu konudan daha fazla soru