Which of the following steps should the technician complete BEFORE removing the virus?

A technician is preparing to remediate a Trojan virus that was found on a workstation.

Which of the following steps should the technician complete BEFORE removing the virus?
A . Disable System Restore.
B. Schedule a malware scan.
C. Educate the end user.
D. Run Windows Update.

View Answer

Answer: A

Explanation:

Before removing a Trojan virus from a workstation, a technician should disable System Restore. System Restore is a feature that allows users to restore their system to a previous state in case of problems or errors. However, System Restore can also restore infected files or registry entries that were removed by antivirus software or manual actions. By disabling System Restore, a technician can ensure that the Trojan virus is completely removed and does not reappear after a system restore operation. Scheduling a malware scan may help detect and remove some malware but may not be effective against all types of Trojan viruses. Educating the end user may help prevent future infections but does not address the current issue of removing the Trojan virus. Running Windows Update may help patch some security vulnerabilities but does not guarantee that the Trojan virus will be removed.

References: CompTIA A+ Core 2 (220-1002) Certification Exam Objectives Version 4.0, Domain 1.3