Exam 220-1102 topic 1 question 62 discussion

The tech doesn't recognize the interface. So don't use it.

Some of these questions are answered wrong on purpose so that Exam topics could avoid copyright issues with these tests. But its also good that we have discussion boxes to mitigate these kinds of things, so no, if it quacks like a duck and walks like a duck, then its probably a virus and you shouldn't click on it. The answer is B.

Mnemonic for remembering steps of malware removal: Very Quiet Dogs Really Snore Every Evening Verify (that it really is malware) Quarantine (unplug network cable/wifi, find any storage or devices attached and remove from areas where it could be used) Disable (system restore) Remediate (Do the actual removal of malware) Enable (enable system restore again Educate (educate the end user with 1 on 1 or general message, boards, posters etc.) --------------------- Since the technician has not yet verified its malware, she/he needs to check what triggered it and what it looks like to see if any of the following steps are necessary.

Why are more people not saying A? The system has not yet been quarantined? That's always the first step, right? It's pretty obvious this is a Virus of some kind.

Would "A" be likened to quarantining the affected system?

cateegorically B, why would you use an interface you dont recognize?

It's important for the technician to understand the nature of the interface and what triggered it to appear.

Obvious answer. It’s a fake anti-virus software.

Seems like C is the answers every indian call center scammer wants.

makes the most sense... why would you use an interface you dont recognize? it can be a pop up ad virus

The technician must first determine whether it is legitimate or a potential scam. Therefore, he needs to (B) Investigate what the interface is and what triggered it to pop up.

If the interface is unfamiliar or suspicious, definitely don't use it. B is the only answer that presents a troubleshooting step and doesn't fall for the malware.

C is literally the worst possible answer. Use the scammers own software to remove the virus! Wont end well. B is correct

No doubt about this one: B. Investigate what the interface is and what triggered it to pop up.

The answer is B

Step 1 - Identify malware symptoms, Step 2 - Quarantine infected systems, Step 3 - Disable System Restore, Step 4 - Remediate infected systems, Step 5 - Schedule scans and run updates, Step 6 - Enable System Restore and create restore point, Step 7 - Educate user, So I think the answer is B identify the symptom

B makes more sense