nerdexam
CompTIA

220-1102 · Question #181

A user calls the help desk and reports a workstation is infected with malicious software. Which of the following tools should the help desk technician use to remove the malicious software? (Choose…

The correct answer is D. Windows Firewall E. Windows Defender. To effectively remove malicious software from an infected workstation, a help desk technician should utilize Windows Defender for detection and removal, and Windows Firewall to prevent malware communication.

Security

Question

A user calls the help desk and reports a workstation is infected with malicious software. Which of the following tools should the help desk technician use to remove the malicious software? (Choose two.)

Options

  • AFile Explorer
  • BUser Account Control
  • CWindows Backup and Restore
  • DWindows Firewall
  • EWindows Defender
  • FNetwork Packet Analyzer

How the community answered

(25 responses)
  • A
    4% (1)
  • B
    12% (3)
  • C
    4% (1)
  • D
    80% (20)

Why each option

To effectively remove malicious software from an infected workstation, a help desk technician should utilize Windows Defender for detection and removal, and Windows Firewall to prevent malware communication.

AFile Explorer

File Explorer is used for navigating and managing files and folders; it does not have features for detecting or removing malicious software.

BUser Account Control

User Account Control (UAC) is a security feature that helps prevent unauthorized changes to the operating system but is not a tool for directly removing malware.

CWindows Backup and Restore

Windows Backup and Restore is used for backing up and restoring system images or files, which is useful for recovery after malware, but not for its removal.

DWindows FirewallCorrect

Windows Firewall is crucial during malware removal to block unauthorized outbound connections that the malicious software might attempt to make (e.g., to command-and-control servers or to spread to other systems), thereby containing the infection.

EWindows DefenderCorrect

Windows Defender (now Microsoft Defender Antivirus) is an integrated anti-malware solution in Windows designed to scan for, detect, and remove various types of malicious software, including viruses, spyware, and ransomware.

FNetwork Packet Analyzer

A Network Packet Analyzer is used to monitor and inspect network traffic, which can help in identifying malware activity, but it cannot remove the malicious software itself.

Concept tested: Malware removal tools and techniques

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows

Topics

#Malware Removal#Antivirus#Firewall#System Security

Community Discussion

No community discussion yet for this question.

Full 220-1102 Practice