220-1102 Question #7: Real Exam Question with Answer & Explanation

Question

A user reports that antivirus software indicates a computer is infected with viruses. The user thinks this happened white browsing the internet. The technician does not recognize the interface with which the antivirus message is presented. Which of the following is the NEXT step the technician should take?

Options

• AShut down the infected computer and swap it with another computer
• BInvestigate what the interface is and what triggered it to pop up
• CProceed with initiating a full scan and removal of the viruses using the presented interface
• DCall the phone number displayed in the interface of the antivirus removal tool

Explanation

{"question_number": 1, "question": "A user reports antivirus software indicates infection; technician does not recognize the interface.", "correct_answer": "B", "explanation": "When a technician does not recognize the antivirus interface, it is a red flag for rogue/fake antivirus software (scareware) - a common malware type that mimics legitimate security tools to trick users into clicking, paying, or calling a fraudulent number. The correct NEXT step is to investigate the interface before taking any action. Acting on it (option C) could install real malware, calling the number (option D) is a social engineering trap, and swapping the computer (option A) is premature. Identifying what triggered the pop-up is the proper first investigative step.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.