Question

After removing a ransomware infection from a workstation, you complete the standard malware remediation steps and want to reduce the chance of reinfection. The system is fully patched, has updated anti-malware, and System Restore has been re-enabled. Which additional step BEST addresses the most likely cause of the original infection?

Accepted Answer

Educate the end user on recognizing malicious email attachments and suspicious links

Answer

Disable System Restore permanently to prevent malware persistence

Answer

Replace the workstation's hard drive with a new one

Answer

Set the anti-malware software to scan only during off-hours