220-1102 · Question #311
A user is unable to access files on a work PC after opening a text document. The text document was labeled "URGENT PLEASE READ.txt - In active folder, .txt file titled urgent please read". Which of…
The correct answer is B. Run antivirus scan for malicious software. Upon discovering files are inaccessible after opening a suspicious text document, the support technician should first run an antivirus scan to identify and contain potential malware.
Question
A user is unable to access files on a work PC after opening a text document. The text document was labeled "URGENT PLEASE READ.txt - In active folder, .txt file titled urgent please read". Which of the following should a support technician do FIRST?
Options
- AQuarantine the host in the antivirus system.
- BRun antivirus scan for malicious software.
- CInvestigate how malicious software was installed.
- DReimage the computer.
How the community answered
(26 responses)- A12% (3)
- B81% (21)
- C4% (1)
- D4% (1)
Why each option
Upon discovering files are inaccessible after opening a suspicious text document, the support technician should first run an antivirus scan to identify and contain potential malware.
Quarantining the host is a crucial step, but it typically follows an initial scan to confirm and identify the malicious software.
The symptoms (unable to access files, suspicious "URGENT PLEASE READ.txt" document) strongly indicate a potential malware infection, likely ransomware. The immediate first step should be to run an antivirus scan to detect, identify, and potentially neutralize the malicious software before it causes further damage or spreads.
Investigating how malicious software was installed is a forensic step that should occur after the immediate threat has been identified and contained.
Reimaging the computer is a drastic remediation measure and should be considered after initial diagnostic and removal attempts, not as the very first step.
Concept tested: Initial response to suspected malware infection
Source: https://learn.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/run-a-scan-microsoft-defender-antivirus
Topics
Community Discussion
No community discussion yet for this question.