A user reports a workstation has been performing strangely after a suspicious email was opened on it earlier in the week. Which of the following should the technician perform FIRST?
1. Investigate and verify malware symptoms <- This is where we are
2. Quarantine infected systems
3. Disable System Restore in Windows
4. Remediate infected systems
a. Update anti-malware software
b. Scanning and removal techniques (e.g., safe mode, preinstallation environment)
5. Schedule scans and run updates
6. Enable System Restore and create a restore point in Windows
7. Educate the end user
B. Run a virus scan.
When a user reports unusual behavior on a workstation after opening a suspicious email, the first and most immediate step should be to run a virus scan to check for malware or malicious software. Running a virus scan will help identify and potentially remove any threats that might have been introduced through the suspicious email. Escalating the ticket, using a Windows restore point, or reimaging the computer can be considered as follow-up steps depending on the results of the virus scan and the severity of the issue, but running a virus scan is the initial action to take in this scenario to address potential security threats.
upvoted 3 times
...
This section is not available anymore. Please use the main Exam Page.220-1102 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Manny_1998
1 year, 2 months agodickchappy
7 months, 2 weeks ago44034
1 year, 5 months agoFT786
1 year, 7 months ago