nerdexam
CIW

1D0-610 · Question #22

You opened an e-mail attachment and it launches a virus. The virus takes control of your system and you are unable to run your anti-virus software. Which of the following is the best step for you to…

The correct answer is C. Turn off your computer and reboot from a known, clean system disk. Turning off your computer and rebooting from a known clean system disk (option C) is the best immediate response because it stops the virus from continuing to execute and spread, without giving it further opportunity to damage files or exfiltrate data. A clean boot disk…

CIW Network Technology Associate

Question

You opened an e-mail attachment and it launches a virus. The virus takes control of your system and you are unable to run your anti-virus software. Which of the following is the best step for you to take next?

Options

  • ALet the virus run its course.
  • BCall your local authorities to report an identity theft.
  • CTurn off your computer and reboot from a known, clean system disk.
  • DPlug in your backup drive to try to initiate an immediate backup of important files.

How the community answered

(29 responses)
  • A
    21% (6)
  • B
    14% (4)
  • C
    62% (18)
  • D
    3% (1)

Explanation

Turning off your computer and rebooting from a known clean system disk (option C) is the best immediate response because it stops the virus from continuing to execute and spread, without giving it further opportunity to damage files or exfiltrate data. A clean boot disk bypasses the infected operating system entirely, allowing you to run antivirus tools from a trusted environment where the malware has no foothold.

Why the distractors are wrong:

  • A - Letting the virus "run its course" is never acceptable; it will likely cause further damage, steal data, or spread to other systems.
  • B - Identity theft may eventually be a concern, but calling authorities first doesn't stop the active threat; containment comes before reporting.
  • D - Plugging in a backup drive while the virus is still running risks infecting the backup media itself, destroying your only clean copy of important data.

Memory tip: Think of it as a fire - your first move is to stop the spread (power off), not grab belongings (backup) or call insurance (authorities). "Kill it, then clean it, then report it" is the order of operations for malware response.

Topics

#malware incident response#system recovery#clean boot#virus containment

Community Discussion

No community discussion yet for this question.

Full 1D0-610 Practice