exam questions

Exam 220-1102 All Questions

View all questions & answers for the 220-1102 exam

Exam 220-1102 topic 1 question 109 discussion

Actual exam question from CompTIA's 220-1102
Question #: 109
Topic #: 1
[All 220-1102 Questions]

A user calls the help desk to report potential malware on a computer. The anomalous activity began after the user clicked a link to a free gift card in a recent email.
The technician asks the user to describe any unusual activity, such as slow performance, excessive pop-ups, and browser redirections. Which of the following should the technician do NEXT?

  • A. Advise the user to run a complete system scan using the OS anti-malware application.
  • B. Guide the user to reboot the machine into safe mode and verify whether the anomalous activities are still present.
  • C. Have the user check for recently installed applications and outline those installed since the link in the email was clicked.
  • D. Instruct the user to disconnect the Ethernet connection to the corporate network.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Dido1963
Highly Voted 2 years, 4 months ago
Selected Answer: D
Comptia malware removal steps: 1. Identify and research malware symptoms. ... 2. Quarantine the infected systems. ... 3. Disable System Restore (in Windows). ... 4. Remediate the infected systems. ... 5. Schedule scans and run updates. ... 6. Enable System Restore and create a restore point (in Windows). ... 7. Educate the end user. You did Step 1, now you should do Step 2, even if you are in a SOHO and not in an Enterprise, you should stop the malware, that it can not infect other PCs
upvoted 15 times
...
TKW36
Highly Voted 2 years, 5 months ago
Selected Answer: D
First thing you want to do is quarantine/disconnect the affected system from the network so whatever malicious software doesn't spread. So the answer is D.
upvoted 8 times
...
user9999999
Most Recent 3 weeks, 2 days ago
Selected Answer: A
tech never verified there was malware which is step 1, only says that they asked the user.
upvoted 1 times
...
Dark_Poet
6 months ago
I'm not certain the answer is D because it never really stated in the question that the technician confirm for certain that there was any actual malware...he was still trying to "Identify and research malware symptoms" so the question or the technicians step 1 was never completed...A should be the answer and should complete Step 1 as running a scan is part of step 1...unless running a scan isn't part of "identify and research..." I think A is the answer...
upvoted 1 times
...
Redbttomjane
11 months ago
It says “potential malware” so wouldn’t the tech have to run a full scan to see what the actual issue would be before taking any further steps?
upvoted 2 times
...
vshaagar
1 year ago
Selected Answer: B
Why would answer be D? Here they never stated the user is from an organization or a Soho. This could be a single user. I think the best answer is B.
upvoted 1 times
vshaagar
1 year ago
Sorry i chose the wrong answer. The answer is A. Scan the computer. The small fix first before going to the big stages.
upvoted 2 times
...
...
Fannan
1 year, 8 months ago
Selected Answer: B
The best way to scan a computer for viruses is to boot the computer in safe mode. Safe mode only loads the drivers needed to operate windows, so any potential viruses will not load in this mode.
upvoted 1 times
...
[Removed]
2 years, 1 month ago
Selected Answer: D
D is correct because it follows CompTIA's malware removal steps.
upvoted 5 times
...
Cuddles
2 years, 2 months ago
So it's assumed that by asking a couple of questions that we successfully identified the problem?
upvoted 2 times
amberrcks
2 months ago
The wording on this question is weird because we don't know the outcome of the conversation about observed activity/ performance. If operations were normal, i think the answer would be c. Assuming the users response confirmed that Malware is present, D is the next step.
upvoted 1 times
...
...
wepaid
2 years, 3 months ago
Answer is B
upvoted 1 times
wepaid
2 years, 3 months ago
This is a User complaining.... what does the user know? that user isn't the expert.... its the technician's job to determine if there is really a virus or not.... you run it into safe mode because when you do that you can tell if there is a virus present... after doing that you would do A.
upvoted 2 times
...
...
Nick40
2 years, 4 months ago
Selected Answer: A
A. the question says nothing about this being a computer on a corporate network to begin with. And the first thing you're supposed to do if you notice any of the problems listed is run a scan...
upvoted 4 times
navvvvarroooo
2 years, 4 months ago
"calls help desk"? would this suggest the comp was on a corporate network?
upvoted 3 times
...
...
Monyluv
2 years, 5 months ago
Why would the answer be D can someone explain?
upvoted 1 times
og1olu
2 years, 5 months ago
The technician is required to quarantine the system after identifying the problem. So, I believe D is correct.
upvoted 9 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago