A technician is troubleshooting a Windows 10 workstation that is running extremely slowly. Upon opening Task Manager, the technician notices a process named 'wscript.exe' consuming 99% CPU. The process path is 'C:\Users\Public\Documents\script.vbs'. The technician suspects malware. Which of the following actions should the technician take FIRST to address the issue?

End the wscript.exe process and delete the script.vbs file.

This action may remove the immediate symptom but malware often has persistence mechanisms, such as scheduled tasks or registry entries, that will re-infect the system.

Run System File Checker (sfc /scannow) to repair system files.

SFC is designed to repair corrupted Windows system files, but malware like a VBS script typically does not affect system files directly. It will not remove the malware.

Disable the wscript.exe process from starting automatically using msconfig.

Disabling startup entries does not remove the active infection. The malware may still be running in the current session and can reinfect or cause other issues.

What does this 220-1102 question test?

Static NAT maps one inside address to one outside address.

What is the correct answer to this question?

The correct answer is: Reboot the system into Safe Mode and perform a full antivirus scan. — When malware is suspected, the safest first step is to boot into Safe Mode and run a full antivirus scan. Safe Mode loads only essential drivers and services, allowing antivirus software to run unimpeded. Ending the process or deleting the file may not remove all malicious components (e.g., registry persistence). System File Checker (SFC) is for system file integrity, not malware. Disabling via msconfig is a temporary fix and does not clean the system.

What should I do if I get this 220-1102 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.