easyMultiple Choice
220-1202 Practice Question: That their system is running very slowly, and…
A user reports that their system is running very slowly, and they see frequent pop-up ads even when no browser is open. They also notice that their default search engine has changed without their permission. Which type of malware is most likely causing these symptoms?
⚠ Common exam trap
220-1202 often tests whether candidates can distinguish adware from viruses and rootkits by symptom — the trap is picking 'virus' because the user says the system is slow, when the defining evidence is the persistent ads and search-engine hijack.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Adware
Adware is software that automatically displays or downloads advertising material, typically in the form of pop-ups, redirects, and browser modifications. The combination of persistent pop-ups outside a browser session plus an unauthorized change to the default search engine is the classic adware signature, often bundled with freeware or browser hijackers.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Virus
Why it's wrong here
A computer virus is a type of malicious software that attaches itself to legitimate programs or documents and replicates, spreading from one computer to another. Its primary function is self-propagation and often includes payloads like data corruption, system crashes, or resource consumption, but it does not inherently manifest as browser pop-up advertisements or unsolicited search engine modifications.
- ✓
Adware
Why this is correct
Adware is a category of software that automatically displays or downloads advertising material, often in the form of pop-up ads, banner ads, or unsolicited new browser tabs. It frequently modifies web browser settings, such as the homepage or default search engine, to redirect users to advertiser-controlled sites. These symptoms directly align with a user reporting excessive pop-ups and altered search functionality, as adware's primary goal is to generate revenue through advertising impressions.
- ✗
Ransomware
Why it's wrong here
Ransomware is a highly destructive form of malware that encrypts a victim's files, rendering them inaccessible, and then demands a ransom payment, typically in cryptocurrency, for their decryption. Its presence is characterized by a prominent ransom note displayed on the screen, not by browser-based pop-up ads or changes to search engine settings. The user's reported symptoms are distinct from the severe data lockout and financial extortion tactics employed by ransomware.
- ✗
Rootkit
Why it's wrong here
A rootkit is a stealthy type of malicious software designed to hide its presence and the presence of other malware on a system, often by modifying operating system processes or kernel functions. Its primary objective is to maintain covert, persistent access and evade detection, not to display advertisements or alter browser configurations. While a rootkit can facilitate other malware, its inherent functionality does not directly produce user-visible symptoms like pop-up ads or search engine hijacking.
Go deeper
Related to this question
About these practice questions
One of 687 original 220-1202 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.