A technician needs to remove malware from a Windows system. The technician has already performed research on the malware and determined it is a memory virus. Which of the following steps should the…

The correct answer is D. Quarantine the affected system. The CompTIA A+ malware remediation process follows a defined order: (1) Identify and research, (2) Quarantine the affected system, (3) Disable System Restore / remove restore points, (4) Remediate, (5) Schedule scans and run updates, (6) Educate the user, (7) Document findings…

Hardware and network troubleshooting

Question

A technician needs to remove malware from a Windows system. The technician has already performed research on the malware and determined it is a memory virus. Which of the following steps should the technician take NEXT?

Options

ADisable the restore points.
BRemediate the affected system.
CEducate the user.
DQuarantine the affected system.

How the community answered

(16 responses)

A
6% (1)
B
13% (2)
D
81% (13)

Explanation

The CompTIA A+ malware remediation process follows a defined order: (1) Identify and research, (2) Quarantine the affected system, (3) Disable System Restore / remove restore points, (4) Remediate, (5) Schedule scans and run updates, (6) Educate the user, (7) Document findings. After research is complete, the next mandatory step is quarantine - isolating the infected machine from the network prevents the malware from spreading to other systems. Remediation (B) and education (C) come later in the process. Disabling restore points (A) comes after quarantine but before remediation.

Topics

#malware remediation#quarantine#memory virus#incident response steps

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice