easyMultiple ChoiceObjective-mapped
220-1202 Practice Question: A customer reports that their desktop computer is…
A customer reports that their desktop computer is running extremely slowly, and they see frequent pop-up advertisements even when no browser is open. Task Manager shows a process named 'svch0st.exe' consuming 95% CPU. Which type of malware is most likely causing these symptoms?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Adware
Adware displays unwanted advertisements and often masquerades as legitimate processes. The misspelled 'svch0st.exe' mimics a Windows system process, a common adware tactic. This malware type is best removed using a dedicated anti-malware tool.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Ransomware
Why it's wrong here
Ransomware's primary function is to encrypt a user's files or lock access to the system, subsequently demanding a payment, typically in cryptocurrency, for decryption or restoration. Its operational model focuses on data denial and financial extortion, not on displaying unsolicited advertisements or attempting to mimic legitimate system processes to hide its presence. Therefore, symptoms like persistent pop-up ads and suspicious processes are not characteristic of a ransomware infection.
- ✓
Adware
Why this is correct
Adware is specifically designed to display unwanted advertisements, often through pop-up windows, banners, or injected content into web pages, directly matching the symptom of pop-up ads. A common tactic for adware to maintain persistence and avoid detection is to create processes that deliberately impersonate legitimate system services or applications. This behavior allows it to run unnoticed in the background, making it difficult for users to identify and remove, aligning perfectly with the described symptoms.
- ✗
Rootkit
Why it's wrong here
A rootkit is a sophisticated type of malware designed to gain unauthorized access to a computer system and then conceal its presence, along with the presence of other malicious software. It operates at a very low level within the operating system, often modifying core system files or kernel modules to hide processes, files, and network connections. While extremely dangerous for its stealth and persistence, a rootkit's primary role is concealment and privilege escalation, not the direct generation of user-visible symptoms like pop-up advertisements.
- ✗
Spyware
Why it's wrong here
Spyware is malware specifically engineered to secretly monitor user activity and collect sensitive information, such as browsing history, keystrokes, and personal data, without the user's knowledge or consent. Its operational success relies heavily on remaining undetected, making overt actions like generating numerous pop-up ads counterproductive to its core objective of stealthy data exfiltration. While spyware can consume system resources and lead to performance degradation, it rarely manifests through direct, visible advertising interruptions.
Go deeper
Related to this question
About these practice questions
This 220-1202 question is part of Courseiva's 495-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.