Exam 350-201 topic 1 question 108 discussion

ChatGPT: The next step should be to analyze the impact of the malware and contain the artifacts to ensure the system is completely secure before proceeding with further remediation steps.

No Idea. Will choose C based on others comments

After using antivirus and malware removal tools, if abnormal processes are still occurring, the engineer should analyze the components of the infected hosts and their associated business services. This step is crucial to understand the scope of the infection, determine how the malware is affecting the system, and identify any changes made by the malware. This analysis will help in planning the subsequent steps for cleaning the infected host and restoring its functionality1.

The question mentions to restore function.

C. Scan the host with updated signatures and remove temporary containment. - ChatGPT

B. Analyze the components of the infected hosts and associated business services. This step is important to ensure that all aspects of the infected host, including any dependent services or applications, are fully identified and understood so that appropriate actions can be taken to restore functionality and prevent future infections.

The next step is C. https://board.flexibleir.com/b/mn5OChoMqV9PxP0Ka/1

D. Analyze the impact of the malware and contain the artifacts.