Exam 220-1002 topic 1 question 444 discussion

Correct answer is A, why would malware corrupt the NIC if its goal is to spread through out the network.

A. The PC is quarantined.

A. The PC is quarantined. Because when malware is detected, network access is often cut off by network quarantine to stop spread and to allow remediation.

They want you to know the malware removal process not some weird malware attack that is unheard of.

If the technician followed the best practice procedures for malware removal in order according to Comptia, the system should be quarantined already and not connected to the Internet...

I get that a damaged NIC would restrict internet access but surely the MOST likely thing you would want is to not be connected to the internet and have it quarantined. But look, I think since the tech is at the remediate stage we have to presume he has already quarantined the system. So he is trying to get updated signatures to hopefully allow the anti malware software to recognize and remove the malware. In order to get that he needs access to the source code from the internet. I guess the malware is a denial of service type maybe because it is designed to deny internet access and prevent getting updates. Since he is already at the remediate stage he has done A and B and C makes no sense. SO only D can be the answer.

If Network driver is destroyed what's the need for making malware. Sometimes better come with good question.