Exam 220-1102 topic 1 question 6 discussion

After verifying the malware, quarantining would be the next step in malware removal process. Comptia Exam Objectives for malware removal. 1. Investigate and verify malware symptoms 2.Quarantine infected systems 3.Disable System Restore in Windows 4.Remediate infected systems a. Update anti-malware software b.Scanning and removal techniques (e.g., safe mode, preinstallation environment) 5.Schedule scans and run updates 6.Enable System Restore and create a restore point in Windows 7. Educate the end user

The answer is C because generally, quarantining a system is the first thing you do in malware removal. Then comes disabling system restore, then scan and remove the malware, and then schedule automated malware scans.

PC is infected with ransomware, and malware scan will not prevent access to compromised information and data. Best thing to do is save what you can and isolate from the network.

Whenever system is suffering from Ransomware it should be isolated from network

Always. Quarantine. First.

Not great question but answer is C.

Quarantine the unit to not affect other users if the ransomware can affect the network. It was not recoverable even if you paid them and some ransomware keys were exposed online.

Quarantine it guys, don't want it to spread like wildfire.