220-1202 Practice Question: A technician is troubleshooting a computer that…

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  End the process 'svchost.exe' in Task Manager.

  Why it's wrong here

  Ending the 'svchost.exe' process in Task Manager is generally ill-advised because 'svchost.exe' is a legitimate and critical Windows process that hosts numerous system services. Terminating it can lead to system instability, crashes, or the loss of essential operating system functionality. While malware can sometimes inject itself into legitimate processes, directly ending 'svchost.exe' is unlikely to remove a fake alert, which is often a separate application or browser-based script, and poses a significant risk to system operation.

• ✓

  Restart the computer and press F8 to boot into Safe Mode with Networking, then run a malware scan.

  Why this is correct

  Restarting the computer into Safe Mode with Networking is the most effective initial step for malware removal. Safe Mode loads only the essential drivers and services, preventing most malware, including scareware, from executing and interfering with cleanup efforts. The 'with Networking' option is crucial as it allows the system to access network resources, enabling the technician to update antivirus definitions, download necessary removal tools, and perform a comprehensive scan without the malware actively running.

• ✗

  Call the toll-free number to get help removing the alert.

  Why it's wrong here

  Calling the toll-free number displayed on a fake security alert is a dangerous action that plays directly into a scam. These alerts are designed by cybercriminals to create panic and trick users into contacting fraudulent technical support. The individuals on the other end will attempt to extort money for unnecessary services, gain remote access to the computer to install additional malware, or steal personal information, further compromising the system and the user's security.

• ✗

  Use System Restore to revert to a previous restore point.

  Why it's wrong here

  Using System Restore to revert to a previous restore point can sometimes remove malware, but it is not always a reliable or comprehensive solution. System Restore primarily affects system files, installed applications, and registry settings, but it typically does not scan or remove malware from user data files. Furthermore, if the malware has been present for an extended period, all available restore points might be infected or corrupted, rendering the restoration ineffective or even reintroducing the infection.

Go deeper

Related to this question