A help desk technician receives a call from a user stating a program was installed and now random pop- ups are appearing on the computer. The technician notices a lot of suspicious network traffic…

Question

Options

• AUpdate the anti-malware software
• BPerform a malware scan in safe mode
• CSet up scheduled scans and updates
• DEducate the end user on best practices

• A
  3% (1)
• B
  70% (21)
• C
  10% (3)
• D
  17% (5)

Explanation

Following the CompTIA malware removal process, after quarantining the system and disabling System Restore, the next step is remediation - scanning for and removing the malware. Performing the scan in safe mode is critical because safe mode loads only essential drivers and services, preventing the malware from running in memory during the scan and making removal more effective. Updating anti-malware software (A) is part of remediation but may not be possible if the quarantined system is off the network. Scheduling scans (C) and user education (D) come after the system is clean.

No community discussion yet for this question.