Malware has been identified on a critical system that is currently quarantined. Which of the following should a technician do after the malware symptoms are correctly identified?

Question

Options

• AEducate the power user for that system.
• BSchedule weekly scans and run routine updates.
• CDisable System Restore.
• DRemediate the infected system.

• A
  5% (2)
• B
  82% (32)
• C
  10% (4)
• D
  3% (1)

Explanation

NOTE: The standard CompTIA malware removal sequence is: (1) identify symptoms, (2) quarantine, (3) disable System Restore, (4) remediate, (5) schedule scans and run updates, (6) re-enable System Restore, (7) educate the end user. With symptoms identified and the system quarantined, the expected next steps are disabling System Restore (C) and then remediating (D)-both of which logically precede scheduling scans (B). If the exam treats this question as testing the post-remediation maintenance phase, then B (schedule weekly scans and run updates) is the ongoing-prevention action that keeps the system clean after cleanup. Educating the user (A) is the final step in the process.

No community discussion yet for this question.