Examkin

Soru

Zorluk: OrtaMalware Detection, Removal, and Prevention

A desktop technician at a biotechnology research facility is responding to a Windows workstation infected with trojan malware. The technician has confirmed the infection, isolated the computer from the local network, and disabled System Restore. Which of the following actions should the technician perform NEXT in accordance with the standard CompTIA malware remediation process?

  1. Update the anti-malware software definitions using an out-of-band methodCevap
  2. B
    Enable System Restore and create a fresh system restore point
  3. C
    Conduct end-user training on phishing awareness and safe browsing practices
  4. D
    Schedule recurring automated scans and OS updates in Windows Settings

Cevap

Update the anti-malware software definitions using an out-of-band method
The standard CompTIA 7-step malware remediation process follows a strict order: 1. Identify symptoms, 2. Quarantine infected system, 3. Disable System Restore, 4. Remediate infected systems (a. Update anti-malware software, b. Scan and use removal techniques), 5. Schedule updates and scans, 6. Enable System Restore and create a restore point, 7. Educate the end user. Since the technician has already completed steps 1 through 3, the immediate next action is sub-step 4a: updating the anti-malware definitions.

Adım Adım Çözüm

1
Identify the current step in the CompTIA 7-step malware remediation workflow
The technician has completed Step 1 (Identify), Step 2 (Quarantine), and Step 3 (Disable System Restore).
Tracking current progress determines the mandatory sequential next action.
2
Determine the sub-steps required for Step 4 (Remediate infected systems)
Remediation requires sub-step 4a (Update anti-malware definitions/engine) before sub-step 4b (Scan and use removal techniques).
Scanning with outdated signatures might fail to detect or clean active threat variants.
3
Select the correct action matching sub-step 4a
Updating anti-malware signatures via an out-of-band mechanism (such as a USB drive or dedicated update server while isolated) is the direct next step.
This maintains network quarantine while ensuring the scanner has up-to-date threat signatures.

Anahtar Kavram

CompTIA 7-Step Malware Remediation Process
Bu soruyu puanla

Konular

Malware Detection, Removal, and Prevention

Bu konudan daha fazla soru