220-1002 · Question #837
When opening a browser, a user receives pop-ups and is redirected to a certain website. A technician discovers a newer form of malware has infected the machine via an email attachment. The…
The correct answer is B. Create a System Restore point of the newly cleaned machine. The CompTIA A+ malware removal process includes re-enabling System Restore and creating a restore point after the machine has been cleaned. After successfully removing malware and updating anti-malware definitions, the next step is to capture the clean system state by creating…
Question
When opening a browser, a user receives pop-ups and is redirected to a certain website. A technician discovers a newer form of malware has infected the machine via an email attachment. The technician updates the anti-malware software and is able to clean the machine. Which of the following should the technician do NEXT?
Options
- ARedeploy the machine back into the production environment.
- BCreate a System Restore point of the newly cleaned machine.
- CExplain proper email scanning techniques to the user.
- DUpdate any other anti-malware software and patch the operating system.
How the community answered
(55 responses)- A5% (3)
- B80% (44)
- C13% (7)
- D2% (1)
Explanation
The CompTIA A+ malware removal process includes re-enabling System Restore and creating a restore point after the machine has been cleaned. After successfully removing malware and updating anti-malware definitions, the next step is to capture the clean system state by creating a System Restore point - this gives a recovery baseline if the machine is infected again. Option A (redeploy to production) is premature; the process isn't complete yet. Option C (educate the user) comes after the technical remediation is fully completed and documented. Option D (update other anti-malware and patch the OS) would logically come before creating the restore point, but the question states the anti-malware was already updated to clean the machine, so B is the correct NEXT step.
Topics
Community Discussion
No community discussion yet for this question.