CompTIA CompTIA Certifications 220-1102 Questions & Answers

• Question 351:

  A user reports that antivirus software indicates a computer is infected with viruses. The user thinks this happened white browsing the internet. The technician does not recognize the interface with which the antivirus message is presented. Which of the following is the NEXT step the technician should take?

  A. Shut down the infected computer and swap it with another computer

  B. Investigate what the interface is and what triggered it to pop up

  C. Proceed with initiating a full scan and removal of the viruses using the presented interface

  D. Call the phone number displayed in the interface of the antivirus removal tool

  Correct Answer: B

  The technician should not proceed with initiating a full scan and removal of the viruses using the presented interface or call the phone number displayed in the interface of the antivirus removal tool12 Shutting down the infected computer and swapping it with another computer is not necessary at this point12

  The technician should not immediately assume that the message is legitimate or perform any actions without knowing what the interface is and what triggered it to pop up. It is important to investigate the issue further, including checking the legitimacy of the antivirus program and the message it is displaying.

• Question 352:

  Which of the following types of malicious software is most likely to demand payments in cryptocurrency?

  A. Ransomware

  B. Keylogger

  C. Cryptomining

  D. Rootkit

  Correct Answer: A

• Question 353:

  Which of the following file types would be used in the Windows Startup folder to automate copying a personal storage table (.pst file) to a network drive at log-in?

  A. .bat

  B. .dll

  C. .ps1

  D. .txt

  Correct Answer: A

• Question 354:

  Which of the following macOS features can help a user dose an application that has stopped responding?

  A. Finder

  B. Mission Control

  C. System Preferences

  D. Force Quit

  Correct Answer: D

• Question 355:

  Which of the following filesystem types does macOS use?

  A. ext4

  B. exFAT

  C. NTFS

  D. APFS

  Correct Answer: D

• Question 356:

  A corporate customer has contacted a technician about a database issue. After a reboot, no one can connect to the database. When the technician arrives on-site, the database service is not started. The technician starts the service, and the database comes up without issue. After some testing, the technician realizes the database service is coming up to quickly on startup before dependent services can start. Which of the following is the BEST solution?

  A. Set the database service to `Automatic (Delayed Start)"

  B. Show the customer how to manually start the service

  C. Create a scheduled task that will start the service on reboot.

  D. Set the service to manual and write a script to start it on reboot.

  Correct Answer: A

• Question 357:

  A user regularly calls and states that they have a computer with possibly corrupt system files and wants to know how to repair them. Which of the following utilities would resolve the problem?

  A. ASR

  B. FIXMBR

  C. SFC

  D. MSCONFIG

  Correct Answer: C

• Question 358:

  Someone who is fraudulently claiming to be from a reputable bank calls a company employee. Which of the following describes this incident?

  A. Pretexting

  B. Spoofing

  C. Vishing

  D. Scareware

  Correct Answer: C

  Vishing is a type of social engineering attack where a fraudulent caller impersonates a legitimate entity, such as a bank or financial institution, in order to gain access to sensitive information. The caller will typically use a variety of techniques, such as trying to scare the target or providing false information, in order to get the target to provide the information they are after. Vishing is often used to gain access to usernames, passwords, bank account information, and other sensitive data.

• Question 359:

  A user contacted the help desk to report pop-ups on a company workstation indicating the computer has been infected with 137 viruses and payment is needed to remove them. The user thought the company-provided antivirus software would prevent this issue. The help desk ticket states that the user only receives these messages when first opening the web browser. Which of the following steps would MOST likely resolve the issue? (Select TWO)

  A. Scan the computer with the company-provided antivirus software

  B. Install a new hard drive and clone the user's drive to it

  C. Deploy an ad-blocking extension to the browser.

  D. Uninstall the company-provided antivirus software

  E. Click the link in the messages to pay for virus removal

  F. Perform a reset on the user's web browser

  Correct Answer: CF

  "The user thought the company-provided antivirus software would prevent this issue." The most likely steps to resolve the issue are to deploy an ad-blocking extension to the browser and perform a reset on the user's web browser. Ad-blocking extensions can help to prevent pop-ups and other unwanted content from appearing in the browser, and resetting the browser can help to remove any malicious extensions or settings that may be causing the issue.

• Question 360:

  A technician suspects a rootkit has been installed and needs to be removed. Which of the following would BEST resolve the issue?

  A. Application updates

  B. Anti-malware software

  C. OS reinstallation

  D. File restore

  Correct Answer: C

  If a rootkit has caused a deep infection, then the only way to remove the rootkit is to reinstall the operating system. This is because rootkits are designed to be difficult to detect and remove, and they can hide in the operating system's kernel, making it difficult to remove them without reinstalling the operating system https://www.minitool.com/backup-tips/how-to-get-rid-of-rootkit-windows-10.html