A technician receives the Chief Executive Officer's (CEO's) Windows 10 laptop, which has been infected with malware.
The technician wants to make sure best practices are followed for troubleshooting and remediating the malware.
Which of the following best practices should the technician perform FIRST in this scenario? (Choose three.)
Click on the arrows to vote for the correct answer
A. B. C. D. E. F. G.ABD.
When dealing with a malware-infected device, it's important to follow certain best practices to ensure proper troubleshooting and remediation. Here are the three best practices that the technician should perform FIRST in this scenario:
Disconnect the device from the network: The first step the technician should take is to disconnect the CEO's laptop from the network. This will prevent the malware from spreading to other devices on the network and protect sensitive data from being compromised.
Identify and research the symptoms: The technician should then identify the symptoms of the malware infection and research the specific type of malware that has infected the CEO's laptop. This will help the technician understand how the malware works and what steps can be taken to remove it.
Scan and use removal techniques: Once the technician has identified the type of malware, they can perform a scan of the device using anti-malware software to detect and remove the malware. The technician should also use other removal techniques as needed, such as deleting infected files or disabling suspicious processes.
It's worth noting that some of the other options listed may be helpful in remedying the malware infection, but they should be performed after the first three steps have been taken. For example, restoring the computer to a previous checkpoint or creating a restore point can be useful in rolling back changes made by the malware, but these steps should be taken after the malware has been removed to ensure that the infection is completely eliminated. Similarly, educating the end user and scheduling scans and updates can help prevent future infections, but they are not as urgent as disconnecting the device, identifying the symptoms, and removing the malware.