A recent ransomware attack caused several datasets to be inaccessible. Security technicians were able to mitigate any additional attacks and remove any unauthorized software. Which of the following should the technicians do NEXT?
Update the software firewall? That's not even part of seven step malware removal process. Most likely correct answer should be restore from back up as the key term in question is file inaccessible.
update the software firewall is definately part if the seven steps.
Please seel below:
CompTIA has identified a seven-step best practice procedure for malware removal:
1. Identify and research malware symptoms.
2. Quarantine infected systems.
3. Disable System Restore (in Windows).
4. Remediate infected systems:
• Update anti-malware software.
• Scan and use removal techniques (Safe Mode, Pre-installation environment).
5. Schedule scans and run updates.
6. Enable System Restore and create restore point (in Windows).
7. Educate end user.
After a ransomware attack where:
Datasets are inaccessible (likely encrypted),
The attack has been mitigated,
Unauthorized software has been removed,
The next critical step is to restore the affected data from a known-good backup made before the infection.
Backup seems like it would be the best for restoring functionality as quickly as possible but not apart of the remediation steps but updates surely is the next step in malware removal.
Only reason I'd even suspect firewall is to prevent further attack through the network from outside the firewall, but the question never states how the infection started -- so if that is the answer, it's sorta out of left field.
Backup seems like a safe answer to choose.
This section is not available anymore. Please use the main Exam Page.220-1002 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Abrasive123
Highly Voted 4 years agoJE39
4 years agoTripeV
3 years, 5 months agoVasiliyFis
Most Recent 3 weeks, 2 days agoPassngrass
2 years, 10 months agoGilber507
3 years, 3 months agoNssh
3 years, 8 months agoDJGeorgeCostanza
3 years, 11 months agoGranddude
3 years, 10 months agoiLikeBeagButt
3 years, 1 month ago