A technician suspects a Windows workstation is infected with malware after observing unexpected browser redirects and modified system settings. According to CompTIA's standard 7-step malware removal procedures, which of the following initial actions should the technician take before attempting to clean or scan the system? (Select TWO.)
- Disconnect the computer from the wired and wireless network.Cevap
- Disable System Restore in Windows.Cevap
- CPerform an immediate full system restore to a previous restore point.
- DRe-enable System Restore to back up current registry files.
Cevap
The correct actions are disconnecting the infected system from the network (Isolate) and disabling System Restore prior to remediation.
According to the official 7-step remediation process, after identifying malware symptoms (Step 1), the technician must isolate the infected system (Step 2) to contain the threat and disable System Restore (Step 3) so that restore points do not store infected files during remediation.
Adım Adım Çözüm
Anahtar Kavram
CompTIA 7-Step Malware Removal Procedure (Isolate infected system and Disable System Restore prior to remediation)