nerdexam
CompTIA

220-1102 · Question #14

A user calls the help desk to report that none of the files on a PC will open. The user also indicates a program on the desktop is requesting payment in exchange for file access. A technician verifies

The correct answer is C. Quarantine the system. After verifying the malware, quarantining would be the next step in malware removal process. Comptia Exam Objectives for malware removal. 1. Investigate and verify malware symptoms 2. Quarantine infected systems 3. Disable System Restore in Windows 4. Remediate infected systems 5

Security

Question

A user calls the help desk to report that none of the files on a PC will open. The user also indicates a program on the desktop is requesting payment in exchange for file access. A technician verifies the user's PC is infected with ransomware. Which of the following should the technician do FIRST?

Options

  • AUpdate anti-malware software
  • BScanning and removal techniques (e.g., safe mode, preinstallation environment)
  • CQuarantine the system
  • DDisable System Restore

How the community answered

(61 responses)
  • A
    16% (10)
  • B
    5% (3)
  • C
    72% (44)
  • D
    7% (4)

Explanation

After verifying the malware, quarantining would be the next step in malware removal process. Comptia Exam Objectives for malware removal. 1. Investigate and verify malware symptoms 2. Quarantine infected systems 3. Disable System Restore in Windows 4. Remediate infected systems 5. Schedule scans and run updates 6. Enable System Restore and create a restore point in Windows 7. Educate the end user

Topics

#Ransomware#Malware Removal#Incident Response#Security Procedures

Community Discussion

No community discussion yet for this question.

Full 220-1102 Practice