nerdexam
CompTIA

220-1102 · Question #644

A technician received a notification about encrypted production data files and thinks active ransomware is on the network. The technician isolated and removed the suspicious system from the network. W

The correct answer is C. Perform a system scan to remove the malware.. The next step after isolating the system is to perform a system scan to remove the malware (Option C). Since ransomware is suspected, running a comprehensive malware scan can help identify and remove the malicious software. It is crucial to deal with the active threat before taki

Security

Question

A technician received a notification about encrypted production data files and thinks active ransomware is on the network. The technician isolated and removed the suspicious system from the network. Which of the following steps should the technician take next?

Options

  • ASchedule and perform an antivirus scan and system update.
  • BEducate the end user on internet usage.
  • CPerform a system scan to remove the malware.
  • DCreate a system restore point.

How the community answered

(14 responses)
  • A
    7% (1)
  • B
    7% (1)
  • C
    71% (10)
  • D
    14% (2)

Explanation

The next step after isolating the system is to perform a system scan to remove the malware (Option C). Since ransomware is suspected, running a comprehensive malware scan can help identify and remove the malicious software. It is crucial to deal with the active threat before taking further actions.

Topics

#Ransomware#Incident Response#Malware Removal#System Security

Community Discussion

No community discussion yet for this question.

Full 220-1102 Practice