A technician needs to remediate an infected computer. Which of the following is the FIRST step the technician should take?

The correct answer is A. Quarantine the system. The CompTIA A+ malware remediation process begins with quarantine (isolating the infected machine from the network) to prevent the malware from spreading to other systems, communicating with command-and-control servers, or exfiltrating data. Only after isolation should the…

Hardware and network troubleshooting

Question

Options

AQuarantine the system
BUpdate the anti-malware software
CScan and remove the infections
DResearch the malware symptoms

How the community answered

(20 responses)

A
85% (17)
B
5% (1)
C
10% (2)

Explanation

The CompTIA A+ malware remediation process begins with quarantine (isolating the infected machine from the network) to prevent the malware from spreading to other systems, communicating with command-and-control servers, or exfiltrating data. Only after isolation should the technician update anti-malware software (B), scan and remove infections (C), or research malware symptoms (D). Skipping quarantine risks propagating the infection across the entire network before remediation can begin.

Topics

#malware remediation#quarantine#incident response#first response

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice