Demonstrate Familiarity with Malware Removal 100-160 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A user's workstation is infected with a worm that is spreading to other computers on the network. The IT admin has identified the infected machine. What is the FIRST step the admin should take to remediate the worm?

   • ARun a full antivirus scan on the infected workstation.
   • BNotify the user to stop using the workstation.
   • CUpdate the antivirus definitions on the infected workstation.
   • DDisconnect the infected workstation from the network.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which activity is part of post-remediation monitoring to confirm that a system remains clean after malware removal?

   • AObserving system behavior and network traffic for signs of reinfection
   • BImmediately reconnecting the system to the network without restrictions
   • CChanging the system's IP address only
   • DDeleting all event logs to free up space
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   After removing a known trojan from an employee's laptop, the administrator runs a full antivirus scan that comes back clean. The employee is about to reconnect the laptop to the corporate network. What is the most appropriate additional step before allowing network access?

   • AReinstall the operating system to be safe
   • BAllow the laptop back on the network because the full scan was clean
   • CPlace the laptop in a quarantine VLAN and monitor for anomalous outbound traffic for a period
   • DRun a quick scan instead of a full scan to save time
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   After removing a rootkit from a user's laptop, the technician wants to confirm that the system is truly clean. The technician has already run a full antivirus scan that returned no threats. What additional step should the technician take to verify the system is clean?

   • ACheck the Windows Event Viewer for any error logs.
   • BBoot from a trusted recovery environment and run a scan with a second anti-malware tool.
   • CReinstall the operating system to ensure all traces are gone.
   • DRun a disk cleanup utility to remove temporary files.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security analyst is investigating a potential malware infection on a Linux server. The analyst wants to scan the server for rootkits and also check for unusual listening ports. Which combination of tools is most appropriate?

   • ARun a vulnerability scanner like OpenVAS
   • BRun Windows Defender and use tasklist
   • CRun chkrootkit and use netstat or ss to list listening ports
   • DRun a full antivirus scan with ClamAV and check the system log
   Reveal Solution Discussion Select an answer first