A user calls the help desk and reports a workstation is infected with malicious software. Which of the following tools should the help desk technician use to remove the malicious software? (Select TWO).
Correct Answer: C,E
When a workstation is infected with malicious software (malware), the technician should use tools that can detect, remove, and restore the system.
* Windows Defender (E) - This built-in Windows security tool provides antivirus and anti-malware protection. It can scan the system for threats, quarantine, and remove malware.
* Windows Backup and Restore (C) - If the infection is severe, and removal is not possible without damage, restoring the system from a previous backup ensures the workstation is returned to a clean state.
Why Not the Other Options?
* A. File Explorer - While it allows users to manually delete files, it is not an effective tool for removing malware, as many malicious programs hide or protect themselves.
* B. User Account Control (UAC) - UAC helps prevent unauthorized changes but does not remove malware.
* D. Windows Firewall - The firewall blocks unauthorized network traffic, but it does not scan or remove malware from an infected workstation.
* F. Network Packet Analyzer - Tools like Wireshark analyze network traffic and may help detect malware communication, but they do not remove malware.
Solution Steps:
* Run Windows Defender in full scan mode to detect and remove malware.
* If the malware has damaged system files, restore the system using Windows Backup and Restore.
* If the infection persists, consider booting into Safe Mode and performing additional malware scans.
Thus, the best choices for removing malware are E. Windows Defender and C. Windows Backup and Restore.