Exam 220-1102 topic 1 question 426 discussion

Actual exam question from CompTIA's 220-1102

Question #: 426
Topic #: 1

After a security event, a technician removes malware from an affected laptop and disconnects the laptop from the network. Which of the following should the technician do to prevent the operating system from automatically returning to an infected state?

A. Enable System Restore.
B. Disable System Restore.
C. Enable antivirus.
D. Disable antivirus.
E. Educate the user.

Show Suggested Answer

Suggested Answer: B 🗳️

by shkejo at Feb. 6, 2024, 7:43 a.m.

Comments

Submit Cancel

zron

2 weeks, 3 days ago

Selected Answer: E

Antivirus software is not turned off or on during malware remediation. System restore doesn't prevent malware. It only helps fix it. User education is the only one that prevents

upvoted 1 times

...

dvdlau

9 months, 2 weeks ago

Selected Answer: B

B. Disable System Restore. Explanation: Disabling System Restore is step 3 in the CompTIA malware removal process. This step is crucial because if System Restore is left enabled, it may contain infected restore points that could reintroduce the malware to the system. By disabling System Restore, the technician prevents the operating system from automatically reverting to a potentially infected state.

upvoted 1 times

...

blaktarzan215

10 months, 2 weeks ago

why is it B disable system restore?

upvoted 1 times

...

shkejo

1 year, 4 months ago

Selected Answer: B

It’s B. Disable system restore.

upvoted 2 times

...