A tier-2 helpdesk technician at an electric vehicle charging network operations center is responding to an infected Windows 11 workstation that has already been disconnected and quarantined from the local network. The technician needs to prepare the system for malware removal. According to the standard CompTIA malware remediation process, which TWO of the following actions should the technician perform NEXT before initiating a full system anti-malware scan? (Select TWO.)
- Disable System Restore in the Windows System Properties settings.Cevap
- Update anti-malware signature definitions to the latest engine release.Cevap
- CRe-enable System Restore and create a fresh system restore point.
- DExecute the sfc /scannow command from an elevated command prompt.
Cevap
The technician should disable System Restore and update anti-malware definitions.
Following the CompTIA 7-step malware remediation process, once a system is quarantined (Step 2), the technician must disable System Restore (Step 3) to prevent the OS from creating infected restore points. The next phase is remediation (Step 4), which begins by updating anti-malware signatures (Step 4a) prior to initiating a scan (Step 4b).
Adım Adım Çözüm
Anahtar Kavram
CompTIA 7-Step Malware Remediation Process