Exam 220-1002 topic 1 question 377 discussion

Assuming this is a malware troubleshooting question, the first step is to quarantine/isolate the system. Going to driver rollback seems counter to normal troubleshooting procedure or dealing with malware. As weirdly phrased as it is, D is perhaps the best answer to isolate the system from the network.

Given the situation described, the technician should first unplug the Ethernet cable. This action is essential because it helps isolate the device from the network and prevents any potential malware or unauthorised access. (Options D) By disconnecting the Ethernet cable, the technician can quarantine the system and prevent further issues. Other options, such as rolling back driver updates or resetting Internet Options, are not as critical in this scenario

I had this question on another platform. The answer is D. This is sinton of a malaware and the first thing to do is to isolate the device

No need to rollback drivers as there is no mention of defective screen, keyboard, mouse etc. So the hardware appears fine. Defective keyboard? Not relevant. Since the users cannot check for OS updates and program windows close/open unexpectedly, it isn't just an issue with the browser so Internet Options wouldn't have a huge impact. I'd go with unplugging the Ethernet as this is potentially malware and the system needs to be quarantined/disconnected.

D. Unplug the Ethernet cable. 1. Identify and research malware symptoms. 2. Quarantine the infected systems. (D)

Key word here is "FIRST". Whenever troubleshooting I check hardware first. D would make the most sense in this case, even though simply unplugging the cable won't do much by itself, but it may be badly worded

i'm sure A is not correct, you should disconect the pc from the network first

the answer is Unplug the Ethernet cable because may be some one accessing your PC

Which of the following tasks should the technician perform "FIRST"? This has multiple symptoms that appear to be a malware issue. Therefore D seems to be correct

I'd say this is D tbh. It could be drivers i guess, but it seems quite unlikely. Program windows sometimes open and close without user intervention. - OK so keyboard/mouse drivers possibly but would be an unusual symptom Windows cannot check for OS updates, and some websites are not accessible - Would mean your NIC drivers are also fried. It is possible that updates could do this kind of damage to your PC (windows has a bad reputation for this) but seems odd that multiple drivers went bad with (i assume) one update. The far more likely scenario is that it is a malware infection, in which case the symptoms have already been identified (they give you them in the question), so the next step in the malware removal process would be to isolate the machine (pull the ethernet cable).

I really wish these answers provided explanations, because I can't understand the logic of A being the answer.

why A?