Soru

Zorluk: OrtaMalware Symptoms and Standard Removal Procedures

A front desk supervisor at a boutique hotel reports that a Windows 11 workstation is displaying unexpected rogue security pop-ups and attempting unauthorized outbound network traffic. An IT technician immediately disconnects the workstation's Ethernet cable to isolate the system. According to CompTIA's standard 7-step malware remediation process, which action should the technician take NEXT?

  1. Disable System Restore in Windows.Cevap
  2. B
    Update anti-malware signatures and perform a full system scan.
  3. C
    Create a new manual restore point to save current system settings.
  4. D
    Reconnect the Ethernet cable to download critical operating system patches.

Cevap

Disable System Restore in Windows.
According to CompTIA's official 7-step malware removal procedure, after identifying symptoms (Step 1) and isolating the infected system (Step 2), the immediate next action is to disable System Restore (Step 3). Disabling System Restore prevents Windows from preserving infected system files in restore points.

Adım Adım Çözüm

1
Identify completed steps in the CompTIA 7-step malware remediation process.
Malware symptoms were identified (Step 1) and the system was isolated from the network by pulling the network cable (Step 2).
Determining the current progress pinpoints the required sequential action.
2
Select the mandatory next step following isolation.
Step 3 requires disabling System Restore in Windows.
Disabling System Restore prevents Windows from backing up malware-infected system files into recovery snapshots.

Anahtar Kavram

CompTIA 7-Step Malware Remediation Best Practices
Bu soruyu puanla