220-1002 Question #198: Real Exam Question with Answer & Explanation

The correct answer is D: Restart into safe mode.. When a malware-infected machine cannot boot into a standard Windows desktop, the malware may have corrupted startup processes, disabled services, or locked down the normal boot environment. Safe Mode starts Windows with only the minimum required drivers and services (no third-par

Question

A technician is attempting to repair a Windows computer that is infected with malware. The machine is quarantined but still cannot boot into a standard desktop. Which of the following is the most likely NEXT step?

Options

ADisable System Restore.
BCreate a restore point.
CApply system updates.
DRestart into safe mode.

Explanation

When a malware-infected machine cannot boot into a standard Windows desktop, the malware may have corrupted startup processes, disabled services, or locked down the normal boot environment. Safe Mode starts Windows with only the minimum required drivers and services (no third-party startup programs or drivers), which often prevents the malware from loading and allows the technician to run removal tools or investigate the infection. Disabling System Restore (A) is a step done before removal to prevent the malware from hiding in restore points, not during an inability to boot. Creating a restore point (B) is not possible if the machine can't boot normally. Applying system updates (C) requires a functional OS session.

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice