nerdexam
CompTIA

220-1102 · Question #585

A user's antivirus software reports an infection that it is unable to remove. Which of the following is the most appropriate way to remediate the issue?

The correct answer is D. Update the anti-malware. When antivirus software cannot remove an infection, the most appropriate first step is to ensure the software has the latest definitions and engine updates. An outdated anti-malware program may lack the necessary information to effectively detect and remove newer threats.

Security

Question

A user's antivirus software reports an infection that it is unable to remove. Which of the following is the most appropriate way to remediate the issue?

Options

  • ADisable System Restore.
  • BUtilize a Linux live disc.
  • CQuarantine the infected system.
  • DUpdate the anti-malware.

How the community answered

(38 responses)
  • A
    5% (2)
  • B
    3% (1)
  • C
    13% (5)
  • D
    79% (30)

Why each option

When antivirus software cannot remove an infection, the most appropriate first step is to ensure the software has the latest definitions and engine updates. An outdated anti-malware program may lack the necessary information to effectively detect and remove newer threats.

ADisable System Restore.

Disabling System Restore is typically done after malware removal to prevent reinfection from restore points, not as the primary remediation step when the antivirus fails to remove the initial infection.

BUtilize a Linux live disc.

Utilizing a Linux live disc is a valid advanced remediation technique for stubborn malware, but updating the existing anti-malware is a more fundamental and often successful first step before resorting to more drastic measures.

CQuarantine the infected system.

Quarantining the infected system prevents the spread of malware, but it does not address the removal of the infection itself on the affected machine.

DUpdate the anti-malware.Correct

Anti-malware software relies on up-to-date definitions and engine components to effectively detect and remove the latest threats. If an infection cannot be removed, updating the anti-malware software is often the first and most critical step, as newer updates might contain the necessary signatures or heuristics to successfully eradicate the malware.

Concept tested: Malware remediation steps

Source: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/update-microsoft-defender-antivirus

Topics

#Malware removal#Antivirus troubleshooting#Security remediation#Virus definitions

Community Discussion

No community discussion yet for this question.

Full 220-1102 Practice