A systems technician at a municipal water treatment facility has just finished isolating a Windows workstation infected with a spyware keylogger, disabling System Restore, updating the antivirus definitions in Safe Mode, and successfully removing the malicious software. Which of the following actions should the technician perform NEXT according to the standard CompTIA malware remediation process?
- Schedule automatic anti-malware updates and routine system scansCevap
- BRe-enable System Restore and create a fresh system restore point
- CConduct a security awareness session to educate the end user
- DOpen Event Viewer to review system event logs for administrative tool execution errors
Cevap
The technician should schedule automatic anti-malware updates and routine system scans.
The CompTIA 7-step malware remediation process follows a specific order: 1. Identify malware symptoms, 2. Quarantine infected systems, 3. Disable System Restore, 4. Remediate infected systems (update anti-malware signatures, scan, and remove), 5. Schedule updates and initiate scans, 6. Enable System Restore and create a restore point, and 7. Educate the end user. Since remediation (Step 4) has just concluded, the correct next action is Step 5: scheduling updates and scans.
Adım Adım Çözüm
Anahtar Kavram
CompTIA 7-Step Malware Remediation Process