Soru

Zorluk: KolayMalware Symptoms and Standard Removal Procedures

A technician is preparing to troubleshoot a Windows workstation exhibiting severe pop-up advertisements and browser redirects. Following standard CompTIA malware removal procedures, which of the following actions should the technician take PRIOR to executing anti-malware remediation tools? (Select TWO.)

  1. Disconnect the workstation from all wired and wireless network connections.Cevap
  2. Disable System Restore within the operating system options.Cevap
  3. C
    Enable System Restore and generate a new baseline restore point.
  4. D
    Provide security awareness training to the primary workstation user.

Cevap

Disconnecting the workstation from all network connections and disabling System Restore are the required steps to complete prior to running malware remediation tools.
According to standard malware removal procedures, system isolation (unplugging network cables / turning off Wi-Fi) and disabling System Restore must take place before anti-malware tools remediate the system. Disconnecting network access prevents malware spread, while disabling System Restore purged infected restore points.

Adım Adım Çözüm

1
Isolate the infected system
Network cables are removed and Wi-Fi radios are disabled.
System isolation prevents lateral malware propagation across the network.
2
Disable System Restore
All existing restore points on the system are deleted.
Disabling System Restore ensures malware stored in system backups cannot reinfect the machine after cleaning.

Anahtar Kavram

CompTIA 7-Step Malware Removal Procedure (Isolation and Pre-remediation Steps)
Bu soruyu puanla