A IT support technician is tasked with resolving a malware infection reported on a corporate Windows workstation. Place the following steps of the standard CompTIA 7-step malware remediation process in the correct chronological order from first to last.
- 1Disconnect network cables and isolate the infected workstation from the local network.
- 2Disable Windows System Restore to prevent infected restore points from persisting.
- 3Update anti-malware signatures and perform a full system remediation scan.
- 4Re-enable System Restore and generate a clean restore point.
- 5Provide security awareness training and education to the end user.
Cevap
The correct order is: 1. Disconnect network cables and isolate the infected workstation from the local network, 2. Disable Windows System Restore to prevent infected restore points from persisting, 3. Update anti-malware signatures and perform a full system remediation scan, 4. Re-enable System Restore and generate a clean restore point, 5. Provide security awareness training and education to the end user.
The CompTIA standard 7-step malware removal process follows a specific order: 1. Identify symptoms, 2. Quarantine infected system, 3. Disable System Restore, 4. Remediate infected systems (update anti-malware and scan/remove), 5. Schedule scans and run updates, 6. Enable System Restore and create restore point, and 7. Educate the user. Isolating the system first stops infection spread, disabling System Restore prevents malware persistence in backup copies, updating and scanning cleans the system, re-enabling System Restore creates a known-good recovery baseline, and user education concludes the process.
Adım Adım Çözüm
Anahtar Kavram
CompTIA 7-Step Malware Remediation Best Practices