ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 745 - 220-1102 discussion

Report
Export

A technician thinks that a computer on the network has been infected with malware. The technician attempts several times to use a malware removal tool, but the issue persists. Which of the following should the technician do next?

A.

Restore the computer from the last known-good backup

Answers
A.

Restore the computer from the last known-good backup

B.

Reboot the computer into safe mode

Answers
B.

Reboot the computer into safe mode

C.

Purchase a new endpoint protection tool

Answers
C.

Purchase a new endpoint protection tool

D.

Use system recovery to prevent further infection

Answers
D.

Use system recovery to prevent further infection

Suggested answer: B

Explanation:

Detailed

Rebooting the computer into safe mode (Option B) limits the processes and services that run, which can help in isolating and removing persistent malware that might be hiding in normal mode. Safe mode provides a cleaner environment to troubleshoot and remove malware.

Restoring from a backup (Option A) may work but should be considered after attempts to clean the infection.

Purchasing a new endpoint protection tool (Option C) is unnecessary at this stage since existing tools can be run in safe mode.

Using system recovery (Option D) could potentially remove the infection, but it's a more drastic step that may not be necessary yet.

CompTIA A+ Core 2

Reference:

3.3 - Best practices for malware removal, including booting into safe mode

asked 27/10/2024
Aboudou-Razakou KONI
34 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first