ExamTopics Logo
Mail Usteam@examtopics.com
Menu
Comptia Discussions
exam questions

Exam 220-1102 All Questions

View all questions & answers for the 220-1102 exam
Go to Exam

Exam 220-1102 topic 1 question 438 discussion

Actual exam question from CompTIA's 220-1102
Question #: 438
Topic #: 1
[All 220-1102 Questions]

A user reports that an air-gapped computer may have been infected with a virus after the user transferred files from a USB drive. The technician runs a computer scan with Windows Defender but does not find an infection. Which of the following actions should the technician take next? (Choose two.)

  • A. Examine the event logs
  • B. Connect to the network
  • C. Document the findings
  • D. Update the definitions
  • E. Reimage the computer
  • F. Enable the firewall
Show Suggested Answer Hide Answer
Suggested Answer: AD 🗳️
Community vote distribution
AD (78%)
AC (22%)
by yutface at Feb. 29, 2024, 4:34 p.m.

Comments

Chosen Answer:
This is a voting comment. You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ibn_e_nazir
2 months, 3 weeks ago
You can not update definitions without connecting to the internet and you can not connect an air gaped system to the internet. It will be a security risk.
upvoted 2 times
...
st1a
4 months, 4 weeks ago
if it is air gapped, how can you update definitions?
upvoted 1 times
...
dickchappy
6 months, 1 week ago
Selected Answer: AD
Why would you document the findings before even resolving the issue? Scan could be missing the infection due to outdated definitions, event logs could provide more info on the malware.
upvoted 2 times
...
Rixon
7 months, 1 week ago
Selected Answer: AD
Document finding is the LAST step!
upvoted 2 times
...
amityGanoofib
1 year ago
Selected Answer: AC
its good to document your findings, but what should be done NEXT is probably A and C. document after all that.
upvoted 1 times
...
Mr_Tension
1 year ago
Selected Answer: AD
shouldn't we Update the virus definitions incase if it's something new?
upvoted 3 times
...
igorclapa
1 year ago
Selected Answer: AC
A - didn't find anything conclusive? check the event logs for any clues C - always document your findings, no matter what. what if the issue occurs again?
upvoted 1 times
...
yutface
1 year, 1 month ago
Chatgpt said A and C, Gemini said A and D. yutface says A and D makes the most sense.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
CSA
Houston, 1 minute ago