Athough I don't disagree that the "best" answer should be part of the process but the CompTIA malware best practices does not list that as an option. Instead, educating the user is the only option to choose based on CompTIA's process.

The question has already gone through 6 steps of malware removal, the last step is "Educate the user" - The correct answer. The 7 Steps/Best Practices of Malware Removal IQDRSEE 1 - Identify and research malware symptoms 2 - Quarantine infected systems 3 - Disable System Restore 4 - Remediate infected systems (update antimalware software/scan and use removal techniques) 5 - Schedule scans and run updates 6 - Enable system restore and create restore point 7 - Educate the user

it's definetly D

C is the probable correct answer because whoever asshole made this question is a word minipulator. Its said the technician DECIDED... means he hasn't done those steps yet!!!

Answer C is correct as the technician has decided to do those things but hasn't done them yet. The next step will be to patch the system.

The Antivirus Program Discovered Several Hundred Potential malware items on the workstation. It makes sense that this is the correct answer. I see it as a corrective measure to prevent it from passing again, with so many malware at the same time. "Educate The User on Safe Browsing Practices", is also accepted, the useful does not know anything about computer security.

the correct answer here is "what will be correct on the exam" - I believe D will be correct on the exam, as stated.

C. Install all of the latest Windows Updates to patch the system The question did not mention that the technician ran the updates as part of Step 5 which also includes scheduling scans.

This is the right answer

The correct answer should be between C and D. It gonna be good if the answer D just said "Educate the user". But they added "on safe browsing practices" to confuse the candidate. So I agree with the answer C : Install all of the latest Windows Updates to patch the system

1. Identify and research malware symptoms. 2. Quarantine the infected systems. 3. Disable System Restore (in Windows). 4. Remediate the infected systems. A. Update the anti-malware software. B. Scan and use removal techniques (Safe Mode, Preinstallation Environment). 5. Schedule scans and run updates. 6. Enable System Restore and create a restore point (in Windows). 7. Educate the end user.

l would install updates to patch the system after," schedule daily scans on the system, enables System Restore, and creates a restore point."

D. Is the correct answer.

CompTIA is very good at warping questions. This one for example is meant to confuse you. It displays that all the steps were completed by mixing them in its order, except the last step, which is D, educate the user.

The correct answer here is C. The remediation, which is step 4 on the malware`s removal was overlooked, hence the answer.

Yeah run those updates on Linux infected machine...

The question didn't state the tech installed the latest updates and patched the system, It did ask what is the NEXT step the tech needs to do, therefore the answer given is correct