Examkin

Soru

Zorluk: OrtaMalware Symptoms and Standard Removal Procedures

A workstation operating in a clinical laboratory was disconnected from the network after exhibiting persistent rogue browser redirects and unauthorized background network traffic. The technician has confirmed the malware infection and completed the isolation step. According to standard CompTIA malware removal procedures, which of the following actions should the technician perform prior to running a full anti-malware system scan? (Select TWO.)

  1. Disable System Restore in Windows System PropertiesCevap
  2. Update the anti-malware definition files and scanning engineCevap
  3. C
    Enable System Restore and generate an immediate fresh system restore point
  4. D
    Provide end-user security awareness training regarding suspicious link clicks

Cevap

The technician must disable System Restore and update the anti-malware definition files prior to initiating the full system scan.
According to CompTIA's 7-step malware removal process, after identifying the malware (Step 1) and isolating the system (Step 2), the technician must disable System Restore (Step 3). This prevents Windows from capturing infected files in restore points. Then, as part of remediation (Step 4), the technician must update the anti-malware signatures (Step 4a) prior to initiating the scan and removal phase (Step 4b).

Adım Adım Çözüm

1
Review the CompTIA 7-step malware remediation process sequence.
Identified the sequence: 1. Identify, 2. Isolate, 3. Disable System Restore, 4. Remediate (Update definitions & Scan/Clean), 5. Schedule scans/updates, 6. Enable System Restore & create restore point, 7. Educate user.
Correct ordering prevents malware persistence and ensures effective remediation.
2
Identify required actions immediately preceding the full scan phase within Step 3 and Step 4a.
Disabling System Restore prevents infected files from being saved into restore points. Updating anti-malware signatures ensures the scanner has the newest threat signatures.
Both actions must occur before initiating the system scan (Step 4b).

Anahtar Kavram

CompTIA 7-Step Malware Removal Procedure
Bu soruyu puanla

Konular

Malware Symptoms and Standard Removal Procedures

Bu konudan daha fazla soru