CompTIA A+ Core 2 (220-1102) — Question 373

A technician has verified a computer is infected with malware. The technician isolates the system and updates the anti-malware software. Which of the following should the technician do next?

Answer options

• A. Run one scan and schedule future scans.
• B. Back up the uninfected files and reimage the computer.
• C. Restore the clean backup copies of the infected files.
• D. Run repeated remediation scans until the malware is removed.

Correct answer: D

Explanation

The correct action is to run repeated remediation scans until the malware is removed, as multiple scans can help ensure all traces of malware are detected and eliminated. While backing up files and restoring clean backups are important, they should be done after ensuring the system is completely free of malware to avoid reinfection. Running just one scan may not catch all instances of malware, so it's insufficient.