220-1002 · Question #433
A home user reports slow computer performance and application crashes after clicking a "repair" button on a pop-up warning while browsing the Internet. Which of the following are the FIRST steps a…
The correct answer is C. Uninstall any recently installed unknown programs and browser extensions, E. Scan the RAM and hard drive using an up-to-date antivirus program. Clicking a fake 'repair' pop-up is a classic social engineering tactic that installs malware. The two immediate priorities are: (C) removing any suspicious programs or browser extensions installed by the malicious pop-up, which eliminates the threat vector; and (E) running an…
Question
A home user reports slow computer performance and application crashes after clicking a "repair" button on a pop-up warning while browsing the Internet. Which of the following are the FIRST steps a technician should take to identify and resolve the issue? (Select TWO).
Options
- APerform a system file check and replace any changed files with their original versions
- BEnable the pop-up blocker on the Internet browser
- CUninstall any recently installed unknown programs and browser extensions,
- DPerform a hard shutdown and cold boot the computer
- EScan the RAM and hard drive using an up-to-date antivirus program
How the community answered
(36 responses)- A11% (4)
- B6% (2)
- C78% (28)
- D6% (2)
Explanation
Clicking a fake 'repair' pop-up is a classic social engineering tactic that installs malware. The two immediate priorities are: (C) removing any suspicious programs or browser extensions installed by the malicious pop-up, which eliminates the threat vector; and (E) running an up-to-date antivirus scan to detect and remove any malware that may have been installed. Together these steps identify and remediate the infection. A system file check (A) is a secondary step after removing malware. Enabling a pop-up blocker (B) is preventive, not remediation. A hard shutdown (D) does not address the malware itself.
Topics
Community Discussion
No community discussion yet for this question.