100-160 Question 164
Select 3A user reports that their computer is running unusually slow, displays frequent pop-ups, and redirects them to unknown websites while browsing. As a cybersecurity technician, what are the appropriate steps to remove potential malware from the system?
- A
Disconnect the computer from the network to prevent further infection or data exfiltration.
- B
Run a full system scan using up-to-date antivirus or anti-malware software.
- C
Immediately reinstall the operating system without investigating further.
- D
Review and disable unnecessary or suspicious startup programs using a system management tool.
- E
Manually delete suspicious files and registry entries without the help of any security tools.
Show answer and explanation
Correct answers: A, B, D
Explanation
The correct steps for malware removal involve isolating the infected system to prevent further damage, using reliable security tools to identify and eliminate the threats, and investigating startup programs to control potential persistence mechanisms. Reinstallation of the OS is a last resort, and manual deletion without tools can pose risks.
- A. Correct.
Disconnecting the computer from the network is a critical step to prevent the malware from spreading or exfiltrating sensitive data.
- B. Correct.
Running a full system scan with updated antivirus or anti-malware software is an essential step to identify and remove malware effectively.
- C. Incorrect.
Reinstalling the operating system immediately is not always necessary and should only be a last resort after other remediation methods have failed.
- D. Correct.
Reviewing and disabling unnecessary or suspicious startup programs can help prevent malware from running when the system boots, aiding in its removal.
- E. Incorrect.
Manually deleting files or registry entries without using proper tools can lead to unintended consequences such as system instability or missing key malware components.