nerdexam
CompTIA

220-1002 · Question #837

When opening a browser, a user receives pop-ups and is redirected to a certain website. A technician discovers a newer form of malware has infected the machine via an email attachment. The…

The correct answer is B. Create a System Restore point of the newly cleaned machine. The CompTIA A+ malware removal process includes re-enabling System Restore and creating a restore point after the machine has been cleaned. After successfully removing malware and updating anti-malware definitions, the next step is to capture the clean system state by creating…

Hardware and network troubleshooting

Question

When opening a browser, a user receives pop-ups and is redirected to a certain website. A technician discovers a newer form of malware has infected the machine via an email attachment. The technician updates the anti-malware software and is able to clean the machine. Which of the following should the technician do NEXT?

Options

  • ARedeploy the machine back into the production environment.
  • BCreate a System Restore point of the newly cleaned machine.
  • CExplain proper email scanning techniques to the user.
  • DUpdate any other anti-malware software and patch the operating system.

How the community answered

(55 responses)
  • A
    5% (3)
  • B
    80% (44)
  • C
    13% (7)
  • D
    2% (1)

Explanation

The CompTIA A+ malware removal process includes re-enabling System Restore and creating a restore point after the machine has been cleaned. After successfully removing malware and updating anti-malware definitions, the next step is to capture the clean system state by creating a System Restore point - this gives a recovery baseline if the machine is infected again. Option A (redeploy to production) is premature; the process isn't complete yet. Option C (educate the user) comes after the technical remediation is fully completed and documented. Option D (update other anti-malware and patch the OS) would logically come before creating the restore point, but the question states the anti-malware was already updated to clean the machine, so B is the correct NEXT step.

Topics

#malware remediation#System Restore#incident response#anti-malware

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice