An IT technician at a regional freight logistics hub observes unauthorized file encryption and suspicious outbound network traffic on a dispatcher's Windows 11 workstation. The technician immediately disconnects the system from the network. Place the subsequent remediation steps in the correct order according to CompTIA's standard 7-step malware removal process.
- 1Disable System Restore in Windows.
- 2Update anti-malware definition signatures.
- 3Perform a full system anti-malware scan and remove detected threats.
- 4Re-enable System Restore and create a clean restore point.
- 5Educate the dispatcher on recognizing email phishing and security awareness.
Cevap
The correct order follows CompTIA's official 7-step malware removal process: 1. Disable System Restore in Windows, 2. Update anti-malware definition signatures, 3. Perform a full system anti-malware scan and remove detected threats, 4. Re-enable System Restore and create a clean restore point, 5. Educate the dispatcher on recognizing email phishing and security awareness.
CompTIA defines a strict 7-step malware remediation procedure: 1. Identify malware symptoms, 2. Quarantine infected systems, 3. Disable System Restore, 4. Remediate infected systems (a. Update anti-malware software/signatures, b. Scan and use removal techniques), 5. Schedule scans and run updates, 6. Enable System Restore and create a restore point, and 7. Educate the end user. Since the scenario states the malware has been identified and isolated (Steps 1 & 2), the correct subsequent sequence begins with disabling System Restore, updating signatures, scanning and removing threats, re-enabling System Restore to create a clean restore point, and concluding with end-user training.
Adım Adım Çözüm
Anahtar Kavram
CompTIA 7-Step Malware Removal Process