A front desk supervisor at a boutique hotel reports that a Windows 11 workstation is displaying unexpected rogue security pop-ups and attempting unauthorized outbound network traffic. An IT technician immediately disconnects the workstation's Ethernet cable to isolate the system. According to CompTIA's standard 7-step malware remediation process, which action should the technician take NEXT?
- Disable System Restore in Windows.Cevap
- BUpdate anti-malware signatures and perform a full system scan.
- CCreate a new manual restore point to save current system settings.
- DReconnect the Ethernet cable to download critical operating system patches.
Cevap
Disable System Restore in Windows.
According to CompTIA's official 7-step malware removal procedure, after identifying symptoms (Step 1) and isolating the infected system (Step 2), the immediate next action is to disable System Restore (Step 3). Disabling System Restore prevents Windows from preserving infected system files in restore points.
Adım Adım Çözüm
Anahtar Kavram
CompTIA 7-Step Malware Remediation Best Practices